批处理 检测 并修改系统屏保时间和密码最大过期时间

@echo off

 

secedit /export /cfg c:\security-check-log\temp.txt

find /i "MaximumPasswordAge " c:\security-check-log\temp.txt | find /i "=" > c:\security-check-log\temp2.txt

reg query "HKEY_CURRENT_USER\Control Panel\Desktop" /s | find /i "ScreenSaveTimeOut" >c:\security-check-log\temp3.txt

 

for /f "tokens=2 delims==" %%a in ('wmic path win32_operatingsystem get LocalDateTime /value') do (  

    set t=%%a  

)

 

set /p str1=<c:\security-check-log\temp3.txt

set "str1=%str1:~35%"

echo 1.Current ScreenSaveTimeOut is %str1% seconds. > "c:\security-check-log\securitycheck_ %USERNAME% _%t:~0,8%.log"

if %str1% GTR 180 (

    echo Check failed! It must be no more than 180 seconds. >> "c:\security-check-log\securitycheck_ %USERNAME% _%t:~0,8%.log"

) else (

    echo Check passed! >> "c:\security-check-log\securitycheck_ %USERNAME% _%t:~0,8%.log"

)

 

set /p str2=<c:\security-check-log\temp2.txt

set "str2=%str2:~21%"

echo 2.Current MaximumPasswordAge is %str2% days. >> "c:\security-check-log\securitycheck_ %USERNAME% _%t:~0,8%.log"

if %str2% GTR 30 (

    echo Check failed! It must be no more than 30 days. >> "c:\security-check-log\securitycheck_ %USERNAME% _%t:~0,8%.log"

) else (  

    echo Check passed! >> "c:\security-check-log\securitycheck_ %USERNAME% _%t:~0,8%.log"

)

del c:\security-check-log\temp.txt

del c:\security-check-log\temp2.txt

del c:\security-check-log\temp3.txt

 

#上面部分是检测，如果需要修改，在相应的分支中添加如下代码即可

#大于三分钟

if %str1% GTR 180 (

    echo It must be no more than 3 minutes.The program is resetting it now!

    reg add "HKEY_CURRENT_USER\Control Panel\Desktop" /v ScreenSaveTimeOut /t REG_SZ /d 180 /f

    echo The ScreenSaveTimeOut has been resetted.

    echo It will be ok after you restart your computer.

) else (  

    echo The current ScreenSaveTimeOut is ok.

)

 

 

#大于30天

if %str2% GTR 30 (

    echo It must be no more than 30 days.The program is resetting it now.

    pushd "%~dp0" >>sec.inf

    echo.[Unicode] >>sec.inf

    echo.Unicode=yes >>sec.inf

    echo.[Version] >>sec.inf

    echo.signature="$CHICAGO$" >>sec.inf

    echo.Revision=1 >>sec.inf

    echo.[System Access] >>sec.inf

    echo.MaximumPasswordAge = 30 >>sec.inf

    secedit /configure /db sec.sdb /cfg sec.inf /log sec.log /quiet

    del sec.*

    echo The MaximumPasswordAge has been resetted.

) else (  

    echo The current MaximumPasswordAge is ok.

)