:: 更新日志
:: v1.1 新增设置计算机名
:: v1.2 新增手动设置密码,不显示执行命令
:: v1.3 新增禁止 Windows Update
:: v1.4 更改禁用自动更新方式为注册表，以免影响安装永恒之蓝补丁
:: v1.5 新增启用网络发现
:: v1.5禁用启动修复
:: v2.0 适用于整合镜像


@echo off
: 获取管理员权限
%1 start "" mshta vbscript:CreateObject("Shell.Application").ShellExecute("cmd.exe","/c ""%~s0"" ::","","runas",1)(window.close) && exit

: 设置计算机名
:input
set /p name=请输入计算机名:
if "%name%" NEQ "" goto setting else goto error
:error
echo "计算机名不能为空，请重新输入！"
goto input
:setting
wmic computersystem where "caption='%computername%'" call Rename name=%name% 1>nul
echo "设置计算机名完成！"

: 打开 Administrator 账户
net user administrator /active:yes 1>nul
echo "打开 Administrator 账户完成！"

: 为 Administrator 创建密码
set /p password=请为 Administrator 创建密码:
net user administrator %password% 1>nul
echo "为 Administrator 创建密码完成！"

: 设置自动登录
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "AutoAdminLogon" /d 1 /f 1>nul
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "DefaultUserName" /d "Administrator" /f 1>nul
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "DefaultPassword" /d "%password%" /f 1>nul
echo "设置自动登录完成！"

: 设置用户账户组策略
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t REG_DWORD /d 0 /f 1>nul
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "FilterAdministratorToken" /t REG_DWORD /d 0 /f 1>nul
echo "设置用户账户组策略完成！"


: 启用网络共享发现
sc config fdPHost start= auto
sc config FDResPub start= auto
sc start fdPHost
sc start FDResPub

: 同步时间
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters" /v "NtpServer" /d "47.99.120.143,0x9" /f 1>nul
net start W32Time 1>nul
w32tm /resync 1>nul
echo "同步时间完成！"

: 激活 Windows
slmgr /ipk Y9NW9-2KWJ3-M6BXT-VFRJ8-6MT6Y
slmgr /ato
echo "激活 Windows 完成！"

:禁止自动更新
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v AUOptions /t reg_dword /d 1 /f


:禁用启动修复
bcdedit /set {default} bootstatuspolicy ignoreallfailures
bcdedit /set {current} recoveryenabled No

echo "部署前配置完成！"