From 0c7ce9cb2cbb64fe1c09b04d394e44ae03ce0db4 Mon Sep 17 00:00:00 2001
From: Chris Titus <dfm.titus@gmail.com>
Date: Wed, 7 Sep 2022 15:15:02 -0500
Subject: [PATCH] Security Fix and GPO Home Enable

---
 winutil.ps1 | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/winutil.ps1 b/winutil.ps1
index b1ce8459..ee470b4d 100644
--- a/winutil.ps1
+++ b/winutil.ps1
@@ -1062,6 +1062,22 @@ $WPFtweaksbutton.Add_Click({
 
             Write-Host "Finished Removing Bloatware Apps"
             $WPFEssTweaksDeBloat.IsChecked = $false
+
+            Write-Host "Doing Security checks for Administrator Account and Group Policy"
+            if(($(Get-WMIObject -class Win32_ComputerSystem | select username).username).IndexOf('Administrator') -eq -1){
+                net user administrator /active:no
+            }
+        
+            if(!(((Get-ComputerInfo).WindowsEditionId).IndexOf('Core') -eq -1) -or !(((Get-ComputerInfo).WindowsEditionId).IndexOf('Home') -eq -1)){ # Not sure if home edition is Core or Home
+                Write-Host "Enabling gpedit.msc...Group Policy for Home Users"
+                Get-ChildItem @(
+                    "C:\Windows\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientTools-Package*.mum",
+                    "C:\Windows\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientExtensions-Package*.mum"
+                ) | ForEach-Object { dism.exe /online /norestart /add-package:"$_" }
+            }
+            Write-Host "================================="
+            Write-Host "--     Tweaks are Finished    ---"
+            Write-Host "================================="
         }
         $ButtonType = [System.Windows.MessageBoxButton]::OK
         $MessageboxTitle = "Tweaks are Finished "