@echo off

cls

echo -----------
echo LOCKXP 1.0b

echo * creates new administrator account called 'admin'
echo * creates new limited user account caled 'internet' if the current user is 'Administrator' and copies all the files to that user
echo * if the current user is not 'Administrator' then the account will just be dropped to 'Users' Group or limited user
echo -----------
echo WARNING BEFORE YOU START:
echo Make sure you are clean of malware etc !
echo -----------
echo TODO:
echo * detect size of current user and check to see if it has the space to copy before it starts
echo -----------
echo rmccurdy.com
echo -----------
pause

set currentuser=%username%

echo Current user is %username%





:createadmin
echo ===============================================
echo creating new Administrator  account called Admin
echo ===============================================
ping 1.1.1.1 -w 1 > %temp%\null
net user /add admin
net user admin password
net localgroup Administrators /add admin
net localgroup Users /add admin



if %username% == Administrator goto createinternet

goto :droppriv

:createinternet
echo ===============================================
echo creating new SAFE secure LUA account
echo ===============================================
ping 1.1.1.1 -w 1 > %temp%\null
net user /add internet
net user internet password
net localgroup Administrators /delete internet
net localgroup Users /add internet

cls
echo ===============================================
echo Please type 'password' for the account password
echo ===============================================
runas /user:internet "cmd /c quit"


echo ===============================================
echo Setting full control to internet account ( this may take a long time !!!!!)
echo ===============================================
ping 1.1.1.1 -w 1 > %temp%\null
CACLS "%userprofile%" /E /T  /P internet:F

echo ===============================================
echo copying current user files to new user ( this may take a long time !!!!!)
echo ===============================================
ping 1.1.1.1 -w 1 > %temp%\null
xcopy /y /e /c /i "%userprofile%" "C:\Documents and Settings\internet"
if exist "c:\users\" xcopy /y /e /c /i "%userprofile%" "c:\users\internet"

goto end

:droppriv
echo ===============================================
echo User is not 'Administrator' but may have admin rights
echo Dropping current user %username% to LUA ( limited user accsess )
echo ===============================================

net localgroup Users /add %username%
net localgroup Administrators /delete %username%



:end

echo All done!
echo please goto the support link on rmccurdy.com for more help.
pause