1.2 KiB
1.2 KiB
🖥️ Configure Windows Shell Launcher
🔧 What it does
This script configures Shell Launcher to replace explorer.exe with a custom shell for specific users:
- Checks if the Shell Launcher license is enabled.
- Sets the default shell (
explorer.exe) with a restart action if closed. - Assigns a custom shell (
c:\exploit\supervision.cmd) to userw_supervision. - Enables Shell Launcher and verifies configuration.
- Optionally allows removing custom shells or disabling Shell Launcher.
✅ Prerequisites
- Run as Administrator.
- Requires Windows IoT Enterprise or an edition with Shell Launcher feature enabled.
- The account
w_supervisionmust exist. - Custom shell (
c:\exploit\supervision.cmd) must be present.
⚠️ Notes
- Default exit actions available:
0→ Restart shell1→ Restart device2→ Shutdown device
- Changing the default shell affects all users without a custom shell.
- Always test configuration on a lab machine before production.
- To remove or disable Shell Launcher, uncomment:
$ShellLauncherClass.RemoveCustomShell($Admins_SID) $ShellLauncherClass.RemoveCustomShell($Cashier_SID) $ShellLauncherClass.SetEnabled($FALSE)