gredeli.blogg.se

You will need to restart for the changes to become active." ObjReg.SetStringValue HKEY_LOCAL_MACHINE, strSecProvKey, strSecProvValue, strValue WScript.Echo "credssp.dll already added to HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders" ObjReg.GetStringValue HKEY_LOCAL_MACHINE, strSecProvKey, strSecProvValue, strValue

ObjReg.SetMultiStringValue HKEY_LOCAL_MACHINE, strLsaKey, strLsaValue, arrMultiRegSZ WScript.Echo "tspkg already added to HKLM\SYSTEM\CurrentControlSet\Control\Lsa" ObjReg.GetMultiStringValue HKEY_LOCAL_MACHINE, strLsaKey, strLsaValue, arrMultiRegSZ Set objWMI = GetObject("winmgmts:!\\" & strHostname & "\root\default:StdRegProv") StrSecProvKey = "SYSTEM\CurrentControlSet\Control\SecurityProviders" StrLsaKey = "SYSTEM\CurrentControlSet\Control\Lsa" 'Windows 7 and Windows Server 2008 R2 without degrading securityĭim strLsaKey, strLsaValue, strHostname, size, arrMultiRegSZ, objReg, objWMI, colItems, i, found, modifiedĭim objItem, SPlevel, strOSVer, strSecProvKey, strSecProvValue, strValue 'which allows you to use the Remote Desktop Client 6.1 to connect to 'Enables Network Level Authentication on XP SP3 (disabled by default)

You could easily target it at a whole group of PCs by iterating through an array of hostnames.

Here’s a VBScript for the task which will only install on XP SP3 and will detect if the modifications have already been made. reg file is not really a good idea here either since these are additions to existing values, so forced replacements could interfere with certain vendors’ VPN clients etc. Somewhat frustratingly, the steps outlined in Microsoft KB 951608 require Registry edits which I would not want to encourage non-IT-savvy people to try. Rather than leaving the new systems vulnerable by allowing connections from all clients in Computer Propertes > Remote settings, I discovered that Windows XP SP3 does in fact offer NLA support however it’s disabled by default. The Network Level Authentication change to the Remote Desktop Client was made because the original RDP is susceptible to Man-in-the-middle attacks. Migrating to Windows 7 has thrown up another problem – users wanting to connect from home computers running XP cannot use the Remote Desktop Client to connect to their newly upgraded office PCs.