All right, so in the last lecture, we joined our workstations to the domain, and now that we have
both PC one and CPU joint, we can push out a group policy object, which is basically going to be a
log on script so that whenever Randy or Jacklin logs into their system, it will see the hostname,
the IP address, the user name and the domain name of that particular system.
So we're going to use BGM flow for this and let me show you what it is.
So this is on my hotbox.
Not just the VM doesn't have Internet connectivity yet because we haven't configured open sense, which
is our default gateway.
We'll do that later.
In the meantime, we're going to use B.G. info because it automatically displays relevant information
about a Windows computer on the desktop background.
Right.
So this is exactly what we want.
OK, so let me show you how we can configure it.
I've already downloaded it to my host machine.
And I'm just going to drag and drop it and.
Into the system.
Let's just open up the download folder.
Control alt to keep them click on onto the host.
Drag and drop.
And if drag and drop doesn't work, you can always right click copy and then click on the VM and paste,
but we've got it here.
So now we can right.
Click extract or and we'll just put it here.
Show extracted files when complete.
All right, very good.
Now we can double click B.G. info except the end user license agreement.
And then we can get started.
So what we're going to do here.
Is first set this up, so if I click apply.
We'll see, it's a little bit too verbose, right, we don't want to look like this and we want it to
be in the upper right corner so that when all of our users log in, it's in, you know, it's easier
to read it than one consistent place for press control.
We can delete this click apply.
It's gone.
So what do we want?
Well, we want the hostname.
So my double click that we want the username we want.
The machine domain, then, of course, my memory.
I mean, what the IP addresses.
Well, let me show you what happens if I include the IP address.
So we got a preview.
It looks fine here, OK, but some of our workstations are being workstations actually have multiple
adapters, and so if some of those adapters don't have IP settings, it'll show up as none.
And it just messes up the entire formatting of what this looks like.
So we're going to create a custom field.
And fix that.
So what we'll do is we'll click on Custom New.
And will name an IP address.
It's going to be a McQuary and we'll Brownes to create it.
What we want is a W in my class that is the Win32 network configuration, the adapter configuration
and the property will be the IP address.
So you see here it's showing no right.
This is a preview of what we could see on some of our workstations.
So we don't want that.
So what we can do is we can say we're IP enabled equals true.
Now it's only going to show the adapters that actually have an IP address enabled so we can click OK.
OK, here you can click on.
And now what we can do is we can delete this field.
And we can put in our IP address now and then it so that looks the same because we don't have an adapter
on the system that didn't have that wasn't enabled, but on other systems, it might not look that way.
The point is, we've got the way we want it to be, pretty much just format this a little bit.
So I'm going to take this part out.
That's just metadata.
I'm going to make this 72 font.
No, it's really big.
Don't worry, you'll see it's all going to look really nice in a second.
Let's clear out this, a little divider here that looks good.
Put a divider between the domain and the user name and then we'll do.
Something similar for memory preview that looks pretty good, but we just need to change the position.
To the upper right corner, click, OK, apply.
It's pretty sweet, right, I.P. address user logged in the domain and the amount of RAM provision for
the VM.
Now what we do is we save it.
As a configuration file.
Let's go here.
We'll just in the config and click OK to close it now.
We're going to do I think is right there, right.
We're going to create a VBS script.
So what we'll do is we'll type Notepad to open it up.
And the script is basically going to be with responsible for making the magic work.
So first, we need to create a script that shall object since they set up Shell script that create object,
the script that show.
All right.
And then we want to run it so we can call this one method.
And in between here, we need to pass in BGN info executable path.
Hold down shift right, quick copy path.
Toby.
A little bit too many quotes to get into that quote.
Right now, the courts are unbalanced.
Don't worry, we're going to fix that.
We now need to put it in the configuration.
File clerk hold and shift, right.
Click copy as path.
To read of this quote, and then we're going to set up some flags here controlled.
Go back to my host operating system and you can see this, a few flags we might want.
One is the timer.
This will be specified to zero.
It will update the display without displaying the configuration dialogue, which is what we want, and
we also want to suppress error messages.
And accept the license.
So let me show you how to do that.
Going here forward slash timer that Israel silent, no, look around, that means there's no license
prompt, right?
So I'll have a I'm just going to say that as b'day info that VVS.
All right.
Very cool.
So now we need to do something with this.
It's what I'm going to do.
I'm going to cut this folder.
I'm going to put it in our net log on share.
So if I type
log in server between two percent.
Log on.
It's a little typo there and then you go to net log on and you can see the footpath is just whack whack
D.C., which is my hostname, and then backslash net log on here.
We can paste in everything we need.
First, we need to close this out and then we can try again.
All right, very good.
The other thing we need to do is in this VB script, the other thing we need to do is in this script,
we need to just make one like.
And this path needs to be the share.
This is actually carbon bike, that local.
Net log on, big info, what to say about control, see?
It's the same thing here if the net log on BGN four right there, OK, so that looks good to me.
I'd have to save it.
And now let's link the GPO.
This will be in the server manager and close this out and let's load the group policy.
Ed, click on tools, go to group policy management, expand the forest, expand the domain.
Keep going down, good policy objects.
All right, to regulatory policy objects, new MBG info.
OK.
And we can right click it and we can say, edit, and now we go to user configuration policies, window
settings, scripts.
Log on at.
Brouse.
I guess what I'm doing, I'm just creating this as a log on script.
Copy that.
Let's put it here.
And we want to log on script, which is the VBAC file.
Like, OK, like appli click, OK, and then back in the group policy, you can right click on the domain
and say link to an existing GPO, which is the new one.
We just created BGN info click OK.
And we should be good to go now, we just need to give it a quick test, so I'm going to double click
it.
I want to make sure I get no error messages when I run it.
All right, that's good.
You want nothing to happen, right?
You don't want to see any error messages.
That's a really good sign.
Now, what we need to do is move over to the clients and rebuild those machines, and it should work
its way for this to come back.
All right, so I'll give it about five minutes, that's usually how long it takes before the logging
script executes and launches.
All right.
And it's back took about three minutes.
And you may notice that it includes the IPV six address.
That's because this adapter is currently enabled.
Microsoft actually recommends leaving IPV six on like you're not supposed to disable it.
It can break future functionality.
So we're just going to leave that on.
If we disable that, of course, they would get rid of this.
And there may be a WMI query that we can use to actually filter out IPV six.
But instead of going into those details, I think it's sufficient to show that we've got this thing
working right.
The group, the object is linked.
We are now pushing it's running the B.G. info configuration and we're good to go.
So in the next lecture, we are actually going to set up to set up our Microsoft Outlook client with
the email address.
We got log in just to make sure that we have that configured so that when we do the initial access part
of this cyber age will have a way of spearfishing our targets all within the safe legal confines of
our cyber age, it's going to be really, really cool.
So I will see you guys in the next election.
All right, Mike.