Disable system restore

Download JSON Download Python

Ratings

(0)

Release Time

06/12/2018

Downloads

2132 times

Update Time

11/20/2024

Views

1058 times

Share-it:

Tags

restore

Description
Screen Shots

Hi,

This script is used to disable the system restore point on your endpoint.

Refer the wiki to run the procedure with parameters
https://wiki.comodo.com/frontend/web/topic/how-to-create-and-run-procedures-with-parameters

For Example:

drive="c:" #Provide the drive which you need to disable Restore Access

The above parameters should be obtained from the customer for disabling system restore.

Note: Please edit the following parameters in the script

### PARAMETERS TO BE EDITED UNDER PARAMETERS TAB ###

1.Provide_drive_for_system_restore:
TYPE: String
EM LABEL: Any name
Default value: "Provide the drive which you need to disable system restore"

Run as System User

Procedure's Instructions

#To define a particular parameter, replace the 'parameterName' inside itsm.getParameter('parameterName') with that parameter's name
drive=itsm.getParameter('Provide_drive_for_system_restore') #Provide the drive which you need to enable Restore Access
ps_content=r'''

disable-computerrestore -drive "%s\"

'''%drive

import os

def ecmd(command):
    import ctypes
    from subprocess import PIPE, Popen
    
    class disable_file_system_redirection:
        _disable = ctypes.windll.kernel32.Wow64DisableWow64FsRedirection
        _revert = ctypes.windll.kernel32.Wow64RevertWow64FsRedirection
        def __enter__(self):
            self.old_value = ctypes.c_long()
            self.success = self._disable(ctypes.byref(self.old_value))
        def __exit__(self, type, value, traceback):
            if self.success:
                self._revert(self.old_value)
    
    with disable_file_system_redirection():
        obj = Popen(command, shell = True, stdout = PIPE, stderr = PIPE)
    out, err = obj.communicate()
    ret=obj.returncode
    if ret==0:
        if out:
            return out.strip()
        else:
            return ret
    else:
        if err:
            return err.strip()
        else:
            return ret

file_name='powershell_file.ps1'
file_path=os.path.join(os.environ['TEMP'], file_name)
with open(file_path, 'wb') as wr:
    wr.write(ps_content)

ecmd('powershell "Set-ExecutionPolicy RemoteSigned"')
print ecmd('powershell "%s"'%file_path)
print "System Restore Disabled on your endpoint..."
os.remove(file_path)

Comments

No Comments.

Disable system restore

Comments

Leave a Comment