some bugfixes and introduced new tool: setacl.exe

scripts/autoconfig-all.cmd

@@ -15,23 +15,17 @@ date /t
 time /t
 echo.
 
-echo loading settings ...
-call settings.cmd
-echo windows_updates=%windows_updates%
-echo.
-echo ++++++++++++++++++
-
 echo creating %T% ...
 mkdir %T% 1>nul 2>nul
 
 echo cd to %SCRIPTS% ...
 cd /D %SCRIPTS%
 
-echo.
+echo loading settings ...
-echo #######################
+call settings.cmd
-echo ### GLOBAL settings ###
+echo ++++++++++++++++++
-echo #######################
+echo windows_updates=%windows_updates%
-echo.
+echo ++++++++++++++++++
 
 rem 7-zip is essential for other scripts ...
 call unpack-7zip.cmd
@@ -49,6 +43,12 @@ rem copy some other stuff ...
 call copy-exefiles.cmd
 echo.
 
+echo.
+echo #######################
+echo ### MODIFICATIONS   ###
+echo #######################
+echo.
+
 rem this must be done EARLY!
 if %windows_updates% == 0 (
   call disable-updates.cmd 

scripts/disable-accountpicture.cmd

@@ -2,11 +2,19 @@
 
 set TARGET="%ALLUSERSPROFILE%\Microsoft\User Account Pictures"
 
-rem empty logo (disables all logos on logon screen)
+rem default: empty logo (disables all logos on logon screen)
-rem set LOGO=config\user-empty.png
+set LOGO=config\user-empty.png
 
-rem windows logo taken from: http://pngimg.com/image/23601
+echo loading settings ...
-set LOGO=config\windows-logo.png
+call settings.cmd
+echo ++++++++++++++++++
+echo logon_logo=%logon_logo%
+echo ++++++++++++++++++
+
+if %logon_logo% == 1 (
+  rem windows logo taken from: http://pngimg.com/image/23601
+  set LOGO=config\windows-logo.png
+)
 
 echo ####### %0 #######
 

scripts/settings.cmd

@@ -1,2 +1,2 @@
 set windows_updates=1
-
+set logon_logo=1

scripts/uninstall-edge.cmd

@@ -27,10 +27,20 @@ reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EdgeUpdate" ^
   /v "DoNotUpdateToEdgeWithChromium" /d 1 /t REG_DWORD /f
 
 echo.
-echo ... and finally delete ALL edge registry keys
+echo trying to remove stale entries from software list ...
-echo hoping that frankensteins monster cannot come back after this ...
+for %%K in (
-regedit /S delete-edgekeys.reg
+
-echo READY.
+  "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge"
+  "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge"
+
+) do (
+
+  echo %%K
+  SetACL.exe -on %%K -ot reg -actn setowner -ownr "n:Administrators" 1>nul 2>nul
+  SetACL.exe -on %%K -ot reg -actn ace -ace "n:Administrators;p:full" 1>nul 2>nul
+  reg delete %%K /f
+
+)
 
 echo.
 echo ####### %0 #######

scripts/unpack-zipfiles.cmd

@@ -20,6 +20,7 @@ for %%A in (
   rclone
   regscanner
   restic
+  setacl
   vim
   winscp
   wub
@@ -87,6 +88,11 @@ move /Y %T%\restic\*.exe %TOOLS%\restic.exe
 rd /S /Q %T%\restic
 echo.
 
+echo Setacl
+move /Y %T%\setacl\*.exe %TOOLS%\setacl.exe
+rd /S /Q %T%\setacl
+echo.
+
 echo VIM
 move /Y %T%\vim\vim.exe %TOOLS%
 rd /S /Q %T%\vim

software/basic.csv

@@ -22,3 +22,4 @@ https://www.nirsoft.net/utils/regscanner-x64.zip regscanner.zip
 http://www.drivesnapshot.de/download/snapshot64.exe snapshot64.exe
 https://ftp.halifax.rwth-aachen.de/videolan/vlc/3.0.12/win64/vlc-3.0.12-win64.exe vlc-setup.exe
 https://github.com/microsoft/terminal/releases/download/v1.5.10411.0/Microsoft.WindowsTerminal_1.5.10411.0_8wekyb3d8bbwe.msixbundle windowsterminal-setup.msixbundle
+https://helgeklein.com/downloads/SetACL/current/SetACL%20(executable%20version).zip setacl.zip