:: //*************************************************************************************************
:: //
:: // Post – Automated installation of all post-build software.
:: //
:: // For Kantar by Juan Calderon
:: //
:: // Date: 11/10/2021
:: //
:: // Latest Update: 18/05/2021 — Changelog as follows:
:: // 1. No changes
:: //
:: //*************************************************************************************************

@echo off

@echo.
@echo *************************************************************************************
@echo — Remove c:\EnableBL —
@echo *************************************************************************************

rd c:\EnableBL /s /q

c:
cd C:\post

@echo.
@echo *************************************************************************************
@echo — Install CERT —
@echo *************************************************************************************

certutil.exe -addstore root netd2.cer

@echo.
@echo *************************************************************************************
@echo — Install regedits that stimulate BigFix —
@echo *************************************************************************************

::net stop besclient
::@echo Importing new BigFix client resource settings
::regedit /s “\bigfix\cpu_bind_config.reg”
::net start besclient

@echo.
@echo *************************************************************************************
@echo — Remove Forcepoint —
@echo *************************************************************************************
cscript remove_forcepoint.vbs

timeout 15

@echo.
@echo *************************************************************************************
@echo — Install Dell Power Manager —
@echo *************************************************************************************
MSIEXEC /i C:\post\DPM_Setup64_3_11_0.msi /qn

timeout 15

@echo.
@echo *************************************************************************************
@echo — Install Displaylink —
@echo *************************************************************************************

call “C:\post\DisplayLink_USB_Graphics_Software_for_Windows10.2 M4-EXE.exe” -silent

@echo.
@echo *************************************************************************************
@echo — Checking if CrowdStrike installed… —
@echo *************************************************************************************
wmic product get name, version, vendor | find “CrowdStrike”
IF %ERRORLEVEL% NEQ 1 (
@echo CrowdStrike check complete – found.
)
IF %ERRORLEVEL% NEQ 0 (
color 4
@echo CrowdStrike check complete – NOT FOUND.
@echo Installing it …
start c:\post\CrowdStrike\WindowsSensor.exe /install /quiet /norestart CID=03dec07bdbd24b1584d0b36e7000b2a2-9e
timeout 10

)

::call c:\post\!machine_name_rename.bat

@echo.
@echo *************************************************************************************
@echo — Install Dell Command Update, Firmware, Driver updates —
@echo *************************************************************************************
@echo Installing Dell Command Update
call “c:\post\DellCommandUpdate\Dell-Command-Update-Application_T97XP_WIN_4.6.0_A00.EXE” /S

timeout 15
@echo.
@echo.
@echo Checking for and installing firmware updates and drivers
@echo.
@echo Scanning for Updates
call “C:\Program Files (x86)\Dell\CommandUpdate\dcu-cli.exe” /scan -silent
@echo.
@echo Installing updates
call “C:\Program Files (x86)\Dell\CommandUpdate\dcu-cli.exe” /applyUpdates -silent -reboot=enable
@echo.
@echo Installing drivers
call “C:\Program Files (x86)\Dell\CommandUpdate\dcu-cli.exe” /driverInstall -silent -reboot=enable

@echo.
@echo *************************************************************************************
@echo — Finished, reset and manually check Dell Command update again, more Dell todo —
@echo *************************************************************************************

pause

shutdown /r -t 1

echo off
cls
:: by Juan Calderon 09/22
::
:: Developed as an alternative over the manual computer naming of XXXXXX[service tag]
::
:: This batch file will rename the computer using the servivce tag in BIOS.

:: find out what path the batch file is in
:: set batch_path=%~dp0

:: change drive
:: %batch_path:~0,2%

:: crop the last character and cd into it
:: cd %batch_path:~0,-1%

:: clear screen show bitlocker status
:: cls

:: WMIC computersystem where caption=’current_pc_name’ rename new_pc_name

:: pipe machine service tag to serial.txt so that later we can reverse pipe into the variable that used to name the capture file
wmic bios get serialnumber | find /v “SerialNumber” > %temp%/serial.txt

::pipe in serial
set /p serial=<%temp%\serial.txt

:: trim spaces
set serial_temp=%serial: =%

:: store serial
set serial=%serial_temp%

set current_name=%hostname%

@echo.
@echo *************************************************************************************
@echo — Renaming machine from %computername% to XXXXX%serial% —
@echo *************************************************************************************

wmic computersystem where “name=’%computername%'” call rename name=XXXXX%serial%

@echo off
:: Written by Juan Calderon 22/1/23
::
:: Purpose: To encrypt after MDT built to decommission.
cls

:: if the batch file is not run as admin, quit

net.exe session 1>NUL 2>NUL || (Echo This script requires admin elevated rights, exiting. & echo. & pause & Exit /b 1)

echo This script will perform the following tasks:
echo.
echo – copy new group policy files to enable bitlocker pin requirement
echo – reload the policy
echo – trigger bitlocker encryption
echo – type in the bitlocker pin 8 digits, you will not see your input, verify pin.
echo – forced reboot in 5 secs (give time for encrytion to
echo – on reboot encryption will enable, login and monitor status by clicking on key is desktray.
echo.

::find out what path the batch file is in
set batch_path=%~dp0

::crop the last character and cd into it
cd %batch_path:~0,-1%

:: change drive

cd %CD%

echo This batch file is being run from %batch_path%
echo.

xcopy GroupPolicy\. c:\windows\system32\GroupPolicy\ /s/e/y

gpupdate /force
::manage-bde -on C: -RecoveryKey D: -RecoveryPassword
manage-bde -protectors -add c: -pw
manage-bde -on -usedspaceonly C:
shutdown /r -t 5