Push out Commands to all Domain PCs

Juan @ BrickTech 1 Reputation point
2021-03-22T13:42:29.157+00:00

I'm looking for a way to push out commands to all workstations. The scenario is as follows:

I often go to environments that I am not familiar with to audit the network. Part of that is a network scan, but to use our specific tools we need to configure a couple of things on every workstation (enable wmi access, enable file and printer sharing, etc.). We have a batch file we can run on every computer, but this solution does not scale well as you can imagine. I've included the commands we run below.

Ideally, there would be a way to push out the batch file to run one time on all computers connected to the domain. Alternatively, we could create a new batch file that creates GPO that does the same things, but this is something that I have not done before.

Any help is really appreciated!

rem Allow the device to be pingable through Windows Firewall
netsh firewall set icmpsetting type=ALL mode=enable
netsh advfirewall firewall add rule name="ICMP Allow incoming V4 echo request" protocol=icmpv4:8,any dir=in action=allow
netsh advfirewall firewall add rule name="ICMP Allow incoming V6 echo request" protocol=icmpv6:8,any dir=in action=allow

rem Turn on File and Printer Sharing
netsh advfirewall firewall set rule group="File and Printer Sharing" new enable=Yes

rem Allow WMI access through Windows Firewall
netsh firewall set service type=remoteadmin mode=enable
netsh advfirewall firewall set rule group="windows management instrumentation (wmi)" new enable=yes

rem Add user account
net user [REDACTED] /add
net localgroup Administrators [REDACTED] /add

Rem Set WMI Permissions
sc sdset SCMANAGER D:(A;;CCLCRPRC;;;AU)(A;;CCLCRPWPRC;;;SY)(A;;KA;;;BA)S:(AU;FA;KA;;;WD)(AU;OIIOFA;GA;;;WD)

ECHO End of script
PAUSE

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,724 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Fan Fan 15,291 Reputation points Microsoft Vendor
    2021-03-23T01:33:41.867+00:00

    Hi,
    Welcome to share here!
    For the commands or the scripts i'm afraid i can't give more advice since not familiar with it.

    For how to deploy a scripts, you can consider the following ways due to your requirement.

    Logon scripts :scripts run when users logon
    Startup scripts:scripts run when computers restart
    For your reference: Using Startup, Shutdown, Logon, and Logoff Scripts in Group Policy

    Schedule task:scripts run at the scheduled time
    How to Configure a Scheduled Task Item using Group Policy

    This response contains a third-party link. We provide this link for easy reference. Microsoft cannot guarantee the validity of any information and content in this link.

    Best Regards,

  2. Fan Fan 15,291 Reputation points Microsoft Vendor
    2021-03-25T05:32:32.14+00:00

    Hi,
    Schedule task: scripts run at the scheduled time
    https://www.faqforge.com/windows-server-2016/configure-scheduled-task-item-using-group-policy/
    This is the one for your requirement.
    There are settings for you to configure it to run the command only once and not reapply .
    Check the following settings when configure the schedule task.
    81376-3253.jpg
    81355-3254.jpg