Re: Scripted Software removal (Encrypting Credentials)

From: Matt Ostiguy (ostiguy_at_gmail.com)
Date: 06/13/05

  • Next message: Meni Milstein: "RE: E-Mail gateway on IIS." 
    Date: Mon, 13 Jun 2005 13:43:13 -0400
To: focus-ms@securityfocus.com

    On 6/13/05, Casey DeBerry <cdeberry@cobizinc.com> wrote:
    > We are looking to remove MS ISA Firewall Client from desktop's
    > throughout our organization. We did not roll this software out the AD,
    > so the option to remove it that way is not available. I have found a
    > couple resources for removing via scripts:
    > http://jtbworld.blogspot.com/2005/01/unattended-uninstallation-using.htm
    > l
    > http://cwashington.netreach.net/depo/view.asp?Index=1035&ScriptType=vbsc
    > ript
    >
    > When adapted, the scripts work for the uninstall; however, we are having
    > problems with user accounts making the changes (User logs in, uninstall
    > script runs, user has no privileges to install/uninstall software,
    > script fails). Is there a way to encrypt the credentials so users are
    > unable to view them?
    >
    > Casey DeBerry

    If you have AD, you might be able to use a script as a startup script
    assigned via a GPO, which will run as the local system account, and
    not as the logged in user, which is the case for logon scripts. To
    test using the script as sytem account (so to see if it uninstalls
    cleanly running as that user account), schedule it via the task
    scheduler.

    Matt

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Meni Milstein: "RE: E-Mail gateway on IIS."

    Relevant Pages

    • SUMMARY: How to create password in the script? Version 2
      ... I wrote the following script to create multiple user accounts that I would ... Use the following syntax within the script right after the 'useradd' line ... but the shadow file has two lines for one user. ...
      (SunManagers)
    • Re: objUser.SetInfo "general access denied error"
      ... I don't see where you bind to objOU. ... the script a few times during troubleshooting, it is also possible the user ... 'This script creates AD user accounts from a CSV file ... Const ADS_PROPERTY_UPDATE = 2 ...
      (microsoft.public.scripting.vbscript)
    • Script to create AD and Exchange user account by copying existing account?
      ... copying user accounts to create new user accounts. ... Since I'm running Exchange 2007, ... I'd like the ability to create a script and pass in some ...
      (microsoft.public.windows.server.scripting)
    • AD child domains
      ... I'm trying to modify a vbs script that I found on the internet to show the ... Exchange mailbox quota values for user accounts. ...
      (microsoft.public.scripting.vbscript)
    • Re: GC Moniker Broken??
      ... You should just create your script to use an array, which would contain all three domain names, and then the script would connect to each domain gather the users and repeat until the array is exhausted. ... I have three domains in one Active Directory forest: ... all that is returned is the user accounts for the "A.com" domain. ... Set objConnection = CreateObject ...
      (microsoft.public.scripting.vbscript)