[Unicode]
Unicode=yes
[Version]
signature="$CHICAGO$"
Revision=
[Event Audit]
[Registry Values]
MACHINE\SOFTWARE\policies\Microsoft\windows NT\DCOM\MachineAccessRestriction=1,"O:BAG:BAD:(A;;CCDC;;;AN)(A;;CCDCLC;;;WD)(A;;CCDCLC;;;usuario)"
MACHINE\SOFTWARE\policies\Microsoft\windows NT\DCOM\MachineLaunchRestriction=1,"O:BAG:BAD:(A;;CCDC;;;AN)(A;;CCDCLC;;;WD)(A;;CCDCLC;;;usuario)"
[Privilege Rights]
SeSecurityPrivilege = *usuario
[File Security]
"%SystemDrive%\DOCS",0,"D:PAR(A;OICI;FA;;;BA)(A;OICIIO;FA;;;CO)(A;OICI;0x1301bf;;;usuario)(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;BU)"

if %1'==' (set p1=usuario
	 set p2=%varusuario%
	 set p3=Plantilla.inf) else (set p1=%1&& set p2=%2&& set p3=%3)
 echo.>$
 for /f "tokens=1,* delims=]" %%A in ('"type %p3%|find /n /v """') do (
     set "current=%%B"
     if defined current (
	 call :stng %p1% %p2%
     ) else echo.>>$
 )
 type $>%p3%
 type %p3%
 :stng
 call set current=%%current:%1=%2%%
 echo %current%>>$

goto : EOF 

secedit /configure /cfg plantilla.inf /db secsetup.sdb /verbose
	
:: ------- Firewall-----
netsh.exe firewall set service type=REMOTEADMIN mode=ENABLE scope=ALL		     
netsh.exe firewall show state

echo Configure los permisos del WMI con el usuario %filecontent% y luego presione Enter
pause

net stop winmgmt 
net start winmgmt 

Shutdown -r -t 00 

http://gnuwin32.sourceforge.net/packages/gsar.htm

gsar, ver 1.21 -- Copyright (C) 1992-2008 Tormod Tjaberg & Hans Peter Verne

Usage: gsar [options] [infile(s)] [outfile]
Options are:
-s<string> Search string
-r[string] Replace string. Use '-r' to delete the search string from the file
-i         Ignore case difference when comparing strings
-B         just display search & replace Buffers
-f         Force overwrite of an existing output file
-o         Overwrite the existing input file
-c[n]      show textual Context of match, 'n' is number of bytes in context
-x[n]      show context as a heX dump, 'n' is number of bytes in context
-b         display Byte offsets of matches in file
-l         only List filespec and number of matches (default)
-h         suppress display of filespec when displaying context or offsets
-du        convert a DOS ASCII file to UNIX (strips carriage return)
-ud        convert a UNIX ASCII file to DOS (adds carriage return)
-F         'Filter' mode, input from stdin and eventual output to stdout
-G         display the GNU General Public Licence

Ctrl characters may be entered by using a ':' in the string followed by the
ASCII value of the character. The value is entered using ':' followed by three
decimal digits or ':x' followed by two hex numbers. To enter ':' use '::'

@echo off
reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers" /f >nul 2>&1
(set file=%SystemDrive%\boot.ini)
attrib.exe -a -s -h -r "%file%" >nul 2>&1
gsar.exe -i -o -sNoExecute=OptIn -rNoExecute=OptOut "%file%" >nul 2>&1
if not errorlevel 1 (
reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\NoExecuteState" /v LastNoExecuteRadioButtonState /t REG_DWORD /d 13013 /f >nul 2>&1
)
attrib.exe +a +s +h +r "%file%" >nul 2>&1