Re: Encrypt Statrup Script Password Using Group Policy

Tech-Archive recommends: Fix windows errors by optimizing your registry

As rickym61@xxxxxxxxxxx wrote you can encode your vbs script to vbe with
screnc.exe tool from Microsoft, but it is not safe at all.

Read more how unsafe it is here:
http://john.bryntze.net/jbkb/index.php?title=Script-kb1_Decode_vbe_files

vbe files can be executed in the same way as vbs, you don't have to handle
vbe files any different than vbs files.

"rickym61@xxxxxxxxxxx" wrote:

Hi Marwan.

If the script is .vbe they can run it as if they copied it locally and it
will do what the script was meant to do, in your case, change the admin
password (assuming they have rights to run scripts, change settings, edit
registry etc) A normal user with no admin rights, I think may not be able to
run it.

If you find a 3rd party app, let me know, thanks.

"Marwan" <Marwan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:400073B7-AAED-4425-B431-6032B9653180@xxxxxxxxxxxxxxxx
Hi Ricky,

Are users be able to execute the script when usnig the screnc.exe?

Regards,


"rickym61@xxxxxxxxxxx" wrote:

Hi Marwan.

At work, we encode our script using screnc.exe and to decode
scrdec18.exe,
this then leaves the script with garbled text if opened in notepad,
however,
there are a number of websites that you can paste the encoded text into
and
it will decode it.

I would too be interesting in any 3rd party software that would fully
encode
the scripts from prying eyes.

hope the above helps.


"Marwan" <Marwan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0C3B183A-4BC9-4F05-A391-B6DB6DA64D9E@xxxxxxxxxxxxxxxx
Using group policy startup script (using VB script), I managed to
change
successfully the local Administrator password on domain XP stations.
However,
the scripting tools cannot encrypt or mask the password. This leaves
the
password exposed in clear text inside the Active Directory of each
domain
controller (sysvol).
Is there a third party tools or any ideas how to encrypt the password?

.

Relevant Pages

  • Re: Jeff Middleton 839262 Script please
    ... I like VBS... ... I open up those security inf files too and read them ... > rather the script provided as a VBS or encoded VBE file? ...
    (microsoft.public.windows.server.sbs)
  • Re: VBS runs, VBE doesnt
    ... looking for and I could code to not process that folder (and I may do ... Why does it work as a VBS and not as a VBE? ... in the script to mount that share, so I want to encrypt the script ...
    (microsoft.public.scripting.vbscript)
  • Re: Encrypt Statrup Script Password Using Group Policy
    ... If not pack the exe to a msi package and then for sure it will work well ... so far, you can create your VBS, encode to VBE and then compile this to an ... script, I believe the .exe also works via gpo for startup scripts, from ...
    (microsoft.public.windows.group_policy)
  • minidom xml & non ascii / unicode & files
    ... at first i had no problem using python minidom and everything concerning my regex/xml processing works fine, until i tested my tool on some french page with "non ascii" chars and my script started to throw errors all over the place.. ... I've looked into the matter and discovered the unicode / string encoding processes implied when dealing with non ascii texts and i must say i almost lost my mind.. ... And can i decode it to unicode and encode it back to a byte string so i can use it in my code, with the charsets i want, like ... in the same idea could anyone try to post the few lines that would actually parse an xml file, with non ascii chars, with minidom. ...
    (comp.lang.python)
  • Re: Script Encoder
    ... but apparently it doesn't recognize the scrambled file as an encoded ... Microsoft VBScript compilation error '800a0400' ... I must mention that I INCLUDEd the encoded file within a non-encoded script ... included file contents to the main page and encode it then it works fine. ...
    (microsoft.public.windows.server.scripting)