Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How to use SetupComplete.exe to modify a reg value? (Image)

21 May 2013   #1
NSXguy

Windows 7 Professional x64
 
 
How to use SetupComplete.exe to modify a reg value? (Image)

Greetings all! I work in an enterprise environment & am trying to find the most efficient route to address a vulnerability in one of our images.

When Sysprep completes I need to put quotes around a reg entry in: HKLM\System\CurrentControlSet\services\LMS.

The entry is C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe. I need to put quotes around it i.e. "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"

I already have a command to change an account name using wmic in SetupComplete.exe i.e.: wmic useraccount where name= "User" call rename name= "NewUser"

Does anyone know a wmic command(s) that could be used for this, or an alternative scripting method for use in SetupComplete? Also, can anyone recommend a resource for wmic commands/syntax etc?

Thanks!


My System SpecsSystem Spec
.
22 May 2013   #2
NSXguy

Windows 7 Professional x64
 
 

nm...
My System SpecsSystem Spec
22 May 2013   #3
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

You did do sysprep/generlaize/oobe succesfully? Already created a wim file?
My System SpecsSystem Spec
.

22 May 2013   #4
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

No qoutes needed. Why quotes?


Attached Thumbnails
How to use SetupComplete.exe to modify a reg value? (Image)-naamloos.png  
My System SpecsSystem Spec
23 May 2013   #5
NSXguy

Windows 7 Professional x64
 
 

Thanks for the reply, Kaktussoft. Yes on sysprep, and would be yes on wim but we use Norton Ghost. To clarify, this is on our production image, in use several years now. The registry entry in your screenshot is indeed the one I must modify (and one other, in the same way). I just need to put quotes around the statement to foil an expoit/vulnerability. This image is used in several govt. business areas which are subject to Nessus & Retina scans/audits to discover/address vulnerabilities.

The manual process we are currently using is for our deployment technicians to make this modification after imaging the box. I would like to use a script/entry in SetupComplete.exe to do the modification automatically.

Thanks again for any suggestions
My System SpecsSystem Spec
23 May 2013   #6
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

use setupcomplete.cmd for that

reg add ..... look syntax yourself please. You can try reg add command on a working machine to check for syntax errors. Be sure to add /f to the command

Reg add

Still don't understand why double quotes are needed!
My System SpecsSystem Spec
23 May 2013   #7
NSXguy

Windows 7 Professional x64
 
 

Thanks, Kactussoft, I will use SetupComplete.cmd. I don't know why the double quotes are needed either; it is specified (I believe, our desktop security team requested the addition) in a STIG specifically to remedy a vulnerability. I'm guessing that it causes some escalation of privelege exploit (or similar) to be non-functional while not functionally interfering with the actual value in that key.

Again, thanks for your help/suggestion!
My System SpecsSystem Spec
Reply

 How to use SetupComplete.exe to modify a reg value? (Image)




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
modify keyboard ps2 to usb
I have a keyboard A4Tech, with PS2, i don't want to change it, and i want to know if it's possible to modify the interface. Could i cut the cable, remove the PS2 jack, and replace it with USB interface ? Would that work, guys ? Thank you, any advices are welcome
PC Custom Builds and Overclocking
Winlogon.exe modify is possible?
I don't know if this is where this thread belongs but, when windows starts winlogon.exe starts. Is there a way i can change this and put in another exe for example iexplore.exe(not that i will just an example) and make it auto start instead of users login screen? If yes can you give step by step...
Customization
Modify AIO tips
I am busy modifying an AIO with RT Seven Lite or whatever program you might suggest and am first off adding programs to add compatibility for various programs and file types, such as 3D games that require DirectX 9c to be installed, as well as codecs like CCCP to run video files. Obviously, this is...
Installation & Setup
Modify the GUI of an exe?
I've been looking for a program, to modify the GUI of a compiled application. If anyone knows about a program that does something similar to this, let me know. Thanks.. ~TA
Software


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 23:44.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App