migrate

2026-07-20 09:23:17 -04:00
parent c1315882da
commit 72272e4006
3179 changed files with 562960 additions and 14 deletions
@@ -0,0 +1,243 @@
+STARTUP SCRIPTS  
+_Admin_log_setup_v10.exe_
+
+1. Location: “[\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\AdminLog](file:///\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\AdminLog)”
+2. GPO:
+    
+    1.  “CBP DOMAIN POLICY”
+3.  Links:
+    
+    1. Root of Domain.
+4.  Function:
+
+1. This startup script checks a registry setting to see if the “Admin_Log_Vx.exe” script is the right version. It sets a registry setting in “HKLM\Software\Microsoft\Windows\CurrentVersion\Run ‘logging’”  to match the correct version of “Admin_Log_Vx.exe”. This way the script “Admin_Log_Vx.exe” runs when the user logs on to the workstation.
+
+   
+_BESClient_V2.EXE_
+
+1. A. Location:  “[\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\BigFix\Nsis](file:///\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\BigFix\Nsis)”
+2. B.  GPO:
+    
+    1. a. "CBP DOMAIN POLICY"
+3. C. Links:
+    
+    1. a. Root of Domain
+4. D. Function:
+    
+    1. a. To install the Big Fix Client on XP workstations.
+
+_Cbp-Default_S2_4.exe_  
+A.      Location:  “[\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\Startup\](file:///\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\Startup\)”  
+B.      GPO:  
+a.       “CBP DOMAIN POLICY”  
+C.      Links:  
+a.       Root of Domain  
+D.      Function:  
+a.       Slow Link fix for GPO by changing a registry setting.  
+b.      Removes “WININIT.INI” file if larger than 1K  
+   
+   
+   
+**AdminRefresh_Vx.x.exe**  
+A.      Location: “[\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\ServerScripts\AdminRefresh\NSIS](file:///\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\ServerScripts\AdminRefresh\NSIS)”  
+B.      GPO:   
+a.       “Auto Updates & Rights”  
+b.   "Field Program Applications"  
+   
+C.      LINKS:  
+a.       “Server Farm”  OU  
+b.      “Exchange Servers” OU  
+c.   Field Program Applications OU  
+D.      Function:  
+a.       To change and enforce the password for the local administrator account on the servers.  
+b.    Populates the local Admin group with the WSG security group SG-SERVER-ADMIN  
+c.    Deletes the x86ad local account  
+   
+**PreProdAdminRefresh_V1.0.exe**  
+A.      Location:“\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\ServerScripts\AdminRefresh\NSIS”  
+B.      GPO:  “PREPRODUCTION OU BASE”  
+C.      LINKS:  “PreProduction”  OU  
+D.      Function: Populates the local Admin group with the following AD security groups SG-SERVER-ADMIN, SG-ST&E-ADMINS, SG-WPET-ADMINS  
+   
+**Pride_Admin.exe**  
+A.      Location:   “[\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\Pride](file:///\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\Pride)”  
+B.      GPO:  
+a.       “PRIDE ADMIN”  
+C.      LINKS:  
+a.       “TASPO PRIDE” OU.  
+D.      Function:  
+a.       Adds “ad\sg-server-admin” group to the local administrators group of PRIDE Servers.  
+b.      Adds “ad\sg-Pride-admin” group to the local administrators group of PRIDE Servers.  
+**WSG_Server_Contacts_V2.exe**  
+A.      Location:  [\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\](file:///\\ad.cbp.dhs.gov\wsg\WSG%20SCRIPT%20REPOSITORY\Active%20Directory\)startup”  
+B.      GPO:  
+a.        Auto Update - StageOnly DCO WSUS  
+b.      Auto Update - AutoReboot DCO WSUS  
+c.       Auto Update- AutoReboot CBP WSUS  
+d.      Auto Update - StageOnly CBP WSUS  
+C.      Links:  
+a.       Domain Controller Staging  
+b.      Domain Controllers  
+c.       Sites  
+d.      VLC  
+e.      ECP Servers  
+f.        ICAD  
+g.       Exchange Servers  
+h.      Production  
+i.         DCMETRO Servers  
+j.        PreProduction  
+D.      Function:  
+a.       This script populates the registry with WSG contact and Server Info to help SCOM dynamically add to groups.          
+b.      This will be removed/replaced when we are able to have SCOM run this script twice a day.  
+   
+**Admin_Log_Setup_V10.exe**  
+A.      Location:  [\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\](file:///\\ad.cbp.dhs.gov\wsg\WSG%20SCRIPT%20REPOSITORY\Active%20Directory\)AdminLog”  
+B.      GPO:  
+a.        Admin Log  
+C.      Links:  
+a.       XP-Mockup  
+D.      Function:  
+a.       Check and install Admin_Log.exe  
+   
+**Sessmgr.exe**  
+A.      Location:  File is part of the GPO  
+B.      GPO:  
+a.        BigFix Remote Access  
+C.      Links:  
+a.       Ad.cbp.dhs.gov  
+b.      Windows 7  
+c.       XP-Mockup  
+D.      Function:  
+a.       To help resolve an issue with Remote Assistance running for workstations.  
+   
+**AuditDomainPolicy.cmd**  
+A.      Location:  “[\\ad.cbp.dhs.gov\Netlogon](file:///\\ad.cbp.dhs.gov\Netlogon)”  
+B.      GPO:  
+a.        Domain Controller Policy V1.0  
+C.      Links:  
+a.       Domain Controllers  
+D.      Function:  
+a.       To  apply a more granular audit settings to the Windows 2008 Domain Controllers.  
+b.      This script copy’s a cmd called ApplyDomainAuditPolicy.cmd to the server and schedules a task that copy’s a txt file called DomainServer.txt (all in the same location as above). Then runs auditpol.exe against the DomainServer.txt file.  
+SHUTDOWN SCRIPTS  
+   
+**491SP5_V16.EXE**  
+A.      LOCATION: “[\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\](file:///\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\) Novell\Novell Client Update”  
+B.      GPO:  
+a.       “NOVELL 4912P5 UPDATE”  
+C.      LINKS:  
+a.        “All Region OU’s”  
+D.      FUNCTION:  
+a.       Check the version of Novell Client on workstations. If current it cleans up and exits. If not current, it copies the zip package over, unzips the package and installs the new Novell Client.  
+   
+**ProfileClean10Day.exe**  
+A.      LOCATION: “[\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Profile Cleanup\](file:///\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Profile Cleanup\)”  
+B.      GPO:  
+a.       “PROFILE CLEANUP 10 DAYS”  
+C.      LINKS:  
+a.       “WLN005A WORKSTATIONS” OU.  
+b.      “YMA016A WORKSTAIONS” OU.  
+D.      FUNCTION:  
+a.       Deletes user profiles on the local workstation that are older than 10 days.  
+   
+**SCREENSAVE_V19.EXE**  
+A.      LOCATION: “[\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\CBP-Default\](file:///\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\CBP-Default\)”  
+B.      GPO:  
+a.       “SCREEN SAVER POLICY”  
+C.      LINKS:  
+a.       “DOMAIN LEVEL”  
+b.      “LOS007N” OU  
+c.       “ALL BLOCKED OU’S”  
+D.      FUNCTION:  
+a.       To enable and control screen saver execution time out on workstations. To allow for exceptions and to be able to change the time of timeout settings for certain workstations.  
+b.   Checks in with TNWG01A466\ADEX DBO.CBP_SCREEN_SAVER  
+   
+   
+**UPHClean.exe**  
+A.      Location: “  [\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\](file:///\\ad.cbp.dhs.gov\wsg\WSG%20SCRIPT%20REPOSITORY\Active%20Directory\)  
+B.      GPO:  
+a.        UPHClean  
+C.      Links:  
+a.       AD.CBP.DHS.GOV  
+b.      WSG Workstations  
+D.      Function:  
+a.       This GPO and shutdown script is used to clean the user profile from known items that cause delays loading and unloading the user hive.  Runs on shutdown.  
+   
+LOGON SCRIPTS  
+   
+**CBP-Default_L2_19.exe**  
+A.      LOCATION:  “[\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\Logon\](file:///\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\Logon\)”  
+B.      GPO:  
+a.        CBP DOMAIN POLICY  
+C.      LINKS:  
+a.       “ROOT OF DOMAIN”  
+D.      FUNCTION:  
+a.       To record/log workstation settings for Office, Outlook, Outlook Archive, Screen Saver settings, Novell Client Version.  
+   
+**Outlook-GC-V1.0.exe**  
+A.      Location: “[\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\Logon\Outlook](file:///\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\Logon\Outlook)”  
+B.      GPO:  
+a.        CBP Domain Policy  
+b.      CBP-Outlook-Closest-GC  
+C.      Links:  
+a.       Ad.cbp.dhs.gov  
+b.      XP-Mockup  
+D.      Function:  
+a.       To set a registry setting on all workstations to set it to point to their closest Global Catalog as part of the Exchange Provider.  
+   
+**CBP-Zone-V1.5.exe**  
+A.      Location: “[\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\Logon\CBP-Zone](file:///\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\Logon\CBP-Zone)”  
+B.      GPO:  
+a.        CBP-Zone-For XP Users  
+C.      Links:  
+a.       Ad.cbp.dhs.gov  
+b.      GPO Block  
+c.       XP-IE8  
+d.      XP-Mockup  
+D.      Function:  
+a.       To set IE zone map settings to users running non-vista workstations.  
+b.        WriteRegStr HKCU "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dhs.gov\*.cbp" "Default" ""  
+c.            WriteRegDWORD HKCU "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dhs.gov\*.cbp" "http" 0x00000002  
+d.           WriteRegDWORD HKCU "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dhs.gov\*.cbp" "https" 0x00000002  
+e.           WriteRegDWORD HKCU "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dhs.gov\cbpnetsecure.cbp" "https" 0x00000001  
+   
+**CBP-Zone-V2.0.exe**  
+A.      Location:  “[\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\Logon\CBP-Zone](file:///\\ad.cbp.dhs.gov\wsg\WSG SCRIPT REPOSITORY\Active Directory\Logon\CBP-Zone)”  
+B.      GPO:  
+a.        CBP-Zone-For IE 8 Users  
+C.      Links:  
+a.       Ad.cbp.dhs.gov  
+D.      Function:  
+a.       To set IE zone map settings to users running IE 8:  
+b.      WriteRegStr HKCU "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dhs.gov" "Default" ""  
+c.       WriteRegStr HKCU "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dhs.gov\*.cbp" "Default" ""  
+d.      WriteRegDWORD HKCU "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dhs.gov\*.cbp" "http" 0x00000001  
+e.      WriteRegDWORD HKCU "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dhs.gov\*.cbp" "https" 0x00000001  
+f.        WriteRegDWORD HKCU "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dhs.gov\cbpnetsecure.cbp" "https" 0x00000001  
+TestNet_V6.exe  -  This is a diagnostic script to determine if users have correct permission to net.exe command. Only reports data. (WFP requested this information to assist in migration effort)  
+   
+ListNetDrives_V1.exe -  This is a script that documents users network drives. Only reports data.  (WFP requested this information to assist in migration effort)  
+SIMILAR SCRIPTS USED FOR TESTING IN THE FDCC TEST OU  
+ 
+
+1. GPO: “TEST-FDCC CBP STARTUP SCRIPTS”
+2. LINKS: “XP-IE7”
+3. SCRIPTS:
+    
+    1. ADMIN_LOG_SETUPB.EXE (Startup)
+    2. CBP-DEFAULT_S1_5.EXE (Startup)
+    3. SG-SERVER-ADMIN_V01.EXE (Startup)
+    4. ADMINREFRESH_V1.1.EXE (Startup)
+    5. CBP-DEFAULT_L1_10.EXE (Logon)
+
+SCRIPTS THAT ARE NOT BEING USED  
+   
+1.       AdminRefresh_V1.2.exe (AUTO UPDATES 1, NO LINKS)  
+2.       AdminRefresh_V1.2.exe (AUTO UPDATES 2, NO LINKS)  
+3.       ADMINREFRESH_V1.3.EXE (WSG-TEST-ADMIN-REFRESH,  NO LINKS)  
+4.       PACKAGE_WRKST_MESS_V1_1.EXE (WORKSTATION_NAME_MISMATCH,  NO LINKS)  
+5.       ADMINREFRESH_V1.3.EXE (WSG-TEST-ADMIN-REFRESH,  NO LINKS)  
+6.       PRINTERS.BAT (WSG TEST PRINTER DRIVER)  
+7.       CBP-CIPHER-DISABLE-BACKUP.EXE (RDP (BACK OUT),  SERVER FARM)  
+ 
+ \> From \<[https://uconnect.cbpnet.cbp.dhs.gov/sites/OIT/edme/edco/dco/osg/WSG%20Wiki/AD%20GPO%20SCRIPTS.aspx](https://uconnect.cbpnet.cbp.dhs.gov/sites/OIT/edme/edco/dco/osg/WSG%20Wiki/AD%20GPO%20SCRIPTS.aspx)\>