Description

EYE – BroadSign – Unity0.3

Install Pack Documentation

Table of Contents

Pack Contents    

[BroadSign/Ryarc/XPlayer]InStartup.exe    

ClickOnce Installer.exe    

installcommands.bat    

Logon.reg    

nircmd.bat    

nircmd.exe    

removefilesecurity.vbs    

shutdown.bat    

startup.bat    

StartupSecure.exe    

startup-worker.bat    

startXplayer.exe    

Startup Routine    

Pack Contents

* Removed after pack setup

• • BroadSignInStartup.exe

  • ClickOnce Installer.exe *

  • installcommands.bat *

  • Logon.reg

  • nircmd.bat

  • nircmd.exe

  • removefilesecurity.vbs

  • RyarcInStartup.exe

  • shutdown.bat

  • startup.bat

  • StartupSecure.exe

  • startup-worker.bat

  • startXplayer.bat

  • XPlayerInStartup.exe

[BroadSign/Ryarc/XPlayer]InStartup.exe

Running any of these programs will cause the corresponding program to run at startup, and deactivates the other two.

The files perform the following changes to the registry:

• • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

    • • Delete any keys related to the other programs we are stopping from running at startup.

      • Writes a key causing our chosen program to run at startup.

  • HKEY_CURRENT_USER\Software\Ryarc\RyarcClient

    • • If we are setting Ryarc to run at startup write “AutoKey” key with a value of “True”.

      • Else write the same key with a value of “False”.

ClickOnce Installer.exe

Used to install any ClickOnce applications, in this case used to install Unity on first setup. This file is deleted after initial install.

installcommands.bat

Ensures the default users are setup correctly (adxba, eyecorp, and LogMeInRemoteUser) with the correct passwords and password policies. This file is deleted after initial install.

Logon.reg

• • Stops LogMeIn from locking console on disconnect/timeout

  • Stops LogMeIn from checking for updates

  • Some misc changes that don’t affect functionality

nircmd.bat

Sets resolution depending on if certain files exist. The checks are run in the order below so if multiple files exist for a particular screen setup, the last one in the list will be applied:

• • C:\ADXBA\screentype-one1360768   – Screen 1: 1360x768

  • C:\ADXBA\screentype-one1366768   – Screen 1: 1366x768

  • C:\ADXBA\screentype-one19201080 – Screen 1: 1920x1080

  • C:\ADXBA\screentype-one19201200 – Screen 1: 1920x1200

  • C:\ADXBA\screentype-two1366768   – Screen 1 & 2: 1366x768

  • C:\ADXBA\screentype-two1360768   – Screen 1 & 2: 1360x768

  • C:\ADXBA\screentype-two19201080 – Screen 1 & 2: 1920x1080

nircmd.exe

Toolkit used to set screen resolutions in nircmd.bat along with a few other things. Doesn’t do anything on its own.

removefilesecurity.vbs

Not entirely sure, but I think this removes the run security warning that displays when running an unknown exe that has been downloaded from the internet.

shutdown.bat

Forces the PC to restart in 60s

startup.bat

Set to run at startup, and simply runs startup-worker.bat without any windows.

StartupSecure.exe

• • Sets up Windows to automatically login to the eyecorp user.

    • • HK_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DefaultUserName = "eyecorp"

      • HK_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DefaultPassword = PASSWORD

      • HK_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoAdminLogon = 1

  • Stops monitor from going to sleep.

    • • HK_CURRENT_USER\Control Panel\PowerCfg\CurrentPowerPolicy = 2

  • Disables the screensaver and screensaver password.

    • • HK_CURRENT_USER\Control Panel\Desktop\ScreenSaverIsSecure = 0

      • Delete: HK_CURRENT_USER\Control Panel\Desktop\SCRNSAVE.EXE

  • Disabled balloon notifications

    • • HK_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips = 0

  • Setup desktop wallpaper to tiling blank image

    • • HK_CURRENT_USER\Control Panel\Desktop\Wallpaper = “C:\windows\blank.bmp"

      • HK_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\WallpaperStyle = 1

  • Sets visual effects to performance mode

    • • HK_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\VisualFXSetting = 2

  • Sets PC to reboot on BSOD

    • • HK_LOCAL_MACHINE\System\CurrentControlSet\Control\CrashControl\AutoReboot" = 1

startup-worker.bat

Runs at startup via startup.bat, see Startup Routine.

startXplayer.exe

Runs XPlayer from C:\XPlayerNET.

Startup Routine

The following describes the process that is run every time the PC starts, for more detail check the relevant section above:

• 1. Import Logon.reg into the registry

     1. 1. Stops LogMeIn from locking console on disconnect/timeout

        2. Stops LogMeIn from checking for updates

        3. Some misc changes that don’t affect functionality

  2. Run StartupSecure.exe

• • • 1. Sets up Windows to automatically login to the eyecorp user.

      2. Stops monitor from going to sleep.

      3. Disables the screensaver and screensaver password.

      4. Disabled balloon notifications

      5. Setup desktop wallpaper to tiling blank image

      6. Sets visual effects to performance mode

• 3. Runs nircmd.bat to set screen resolutions

  4. Prevents user passwords from expiring and disables password changes

  5. Attempts to sync system clock with time server

  6. Adds “shutdown” scheduled task to reboot PC at 3am every morning

  7. Disables recovery options on boot, and forces PC to ignore all boot errors