-- PowerShell Commands -- # Load HKEY_LOCAL_MACHINE $Registry = Get-Item HKLM: # Set "Network access: Let Everyone permission apply to anonymous users" $RegKey = $Registry.OpenSubKey("System\CurrentControlSet\Control\Lsa", $true) $RegKey.SetValue("everyoneincludesanonymous", 1) # Configure the 'srvany' settings for the PDFCreator Service $RegKey = $Registry.OpenSubKey("System\CurrentControlSet\Services\PDFCreator", $true) $RegKey = $RegKey.CreateSubKey("Parameters") $RegKey.SetValue('Application', 'C:\Program Files\PDFCreator\PDFCreator.exe', 'string') # Apply permissions to the registry for the 'Everyone' group $NewRegAclRule = New-Object System.Security.AccessControl.RegistryAccessRule("Everyone", "ReadKey", "ContainerInherit", "None", "Allow") $RegKey = $Registry.OpenSubKey("System", $true) $RegKeyAcl = $RegKey.GetAccessControl() $RegKeyAcl.AddAccessRule($NewRegAclRule) $RegKey.SetAccessControl($RegKeyAcl) $RegKey = $Registry.OpenSubKey("Software\\Microsoft\\Windows\\CurrentVersion", $true) $RegKeyAcl = $RegKey.GetAccessControl() $RegKeyAcl.AddAccessRule($NewRegAclRule) $RegKey.SetAccessControl($RegKeyAcl) # Apply permissions to the filesystem for the 'Everyone' group $NewAclRule = New-Object System.Security.AccessControl.FileSystemAccessRule("Everyone", "ReadAndExecute", "ContainerInherit, ObjectInherit", "None", "Allow") $Folder = Get-Item $Env:windir $FolderAcl = $Folder.GetAccessControl() $FolderAcl.AddAccessRule($NewAclRule) $Folder.SetAccessControl($FolderAcl) $Folder = Get-Item $Env:windir\WinSxS $FolderAcl = $Folder.GetAccessControl() $FolderAcl.AddAccessRule($NewAclRule) $Folder.SetAccessControl($FolderAcl) $Folder = Get-Item "$Env:systemdrive\Program Files\PDFCreator" $FolderAcl = $Folder.GetAccessControl() $FolderAcl.AddAccessRule($NewAclRule) $Folder.SetAccessControl($FolderAcl) $Folder = Get-Item "$Env:windir\system32" $FolderAcl = $Folder.GetAccessControl() $FolderAcl.AddAccessRule($NewAclRule) $Folder.SetAccessControl($FolderAcl) $Folder = Get-Item "$Env:windir\AppPatch" $FolderAcl = $Folder.GetAccessControl() $FolderAcl.AddAccessRule($NewAclRule) $Folder.SetAccessControl($FolderAcl) $Folder = Get-Item "$Env:systemdrive\Program Files" $FolderAcl = $Folder.GetAccessControl() $FolderAcl.AddAccessRule($NewAclRule) $Folder.SetAccessControl($FolderAcl) $NewFileAclRule = New-Object System.Security.AccessControl.FileSystemAccessRule("Everyone", "ReadAndExecute", "None", "None", "Allow") $File = Get-Item "$Env:windir\system32\mscms.dll" $FileAcl = $File.GetAccessControl() $FileAcl.AddAccessRule($NewFileAclRule) $File.SetAccessControl($FileAcl) -- End PowerShell Commands --