Get Windows Restrictions

[sadakathullah]

Hi All, I am new to AutoIT and exploring options to use it in my organization. I tried couple of examples and it is fantastic. I am trying to run restrictions test in a pc to see if certain options are disabled like print screen, mstsc etc. I could not get a hang of it. Any help is much appreciated.

[careca]

Hi, get a list of what you want to test, then we go over each one.

To start with the print screen, do you want to test a registry key, or the key itself?

For the mstsc you can run it, and check for it's window with windowexists.

[sadakathullah]

Thanks Careca. I will give it a try with your suggestion for MSTSC. 

Printscreen option is restrited for over 100 computers in my office network. Every week we manually check random PCs to see if this restriction is still active, so when I press printscreen on the keyboard it does not take a screenshot. To test it I open paint and do a paste and nothing gets pasted. Then I record the test results in an excel that PrintScreen is disabled and test was successful in that pc.

[careca]

I agree with what i read in forums and such

https://social.technet.microsoft.com/Forums/office/en-US/78840a9c-0666-490a-8cda-939f292cec9f/to-disable-print-screen-through-group-policy

It's kinda stupid to disable print screen, there are lots of ways to get the image anyway, like a smartphone.

Anyway, you could go with the scancode option and disable the key entirely.

[orbs]

@sadakathullah, welcome to AutoIt and to the forum.

when it comes to testing user restrictions, i find it is best to simulate the user actions and check the system response. for PrintScreen, i would simulate the key being pressed, then check the clipboard for the presence of an image. something like this:

#include <Clipboard.au3>

ConsoleWrite(_IsPrintScreenAllowed() & @CRLF)

Func _IsPrintScreenAllowed()
    ; clear the clipboard
    _ClipBoard_Open(0)
    _ClipBoard_Empty()
    _ClipBoard_Close()
    ; if clipboard is not clear, stop with an error
    If _ClipBoard_CountFormats() <> 0 Then Return SetError(1, 0, True)
    ; send PrintScreen
    Send('{PRINTSCREEN}')
    ; give enough time for the clipboard to finish processing
    Sleep(1000)
    ; check if something exists in the clipboard
    If _ClipBoard_CountFormats() <> 0 Then
        Return True
    Else
        Return False
    EndIf
EndFunc   ;==>_IsPrintScreenAllowed

this function may look long and intimidating, but it is quite simple. a more advanced coder can code it in half the line count, but loose much of its readability.

P.S. i'm curious though, if the GPO you use to restrict PrintScreen also restricts the simulated key press; if you can test the code on a target which you already tested manually, do let me know.

P.S.#2 naturally i agree with the post above, but i found it moot to argue with corporate policies.

 

Edited December 5, 2018 by orbs

[sadakathullah]

Hi Careca,

I agree that there are ways to get a printscreen done like clicking a pic on mobile etc. Restrictions are placed in a way that it is no paper zone and no mobile zone and restricted internet acccess so nothing goes out. Good suggesion to explore on scancode. I will work on that. Thank you verymuch for trigging my thought process

Hi Orbs,

Thank you for the code. I will give it a try in my office pc and I am sure by the way the code flows it will work without a doubt. Thanks a ton. 

[sadakathullah]

Hi Orbs

The code worked but surprised me.. it took a screenshot with send print screen command. But pressing the key  on the keyboard does nothing. So the code returns true even if the keyboard key press is not capturing the screen

You are correct. Simulated key is not restricted by gpo in place

Edited December 5, 2018 by sadakathullah

[orbs]

2 hours ago, sadakathullah said:

Simulated key is not restricted by gpo in place

that is interesting. would you be so kind to check if the built-in "Snipping Tool" works under the GPO restriction?

anyway, it seems that the one thing you can check is the proper configuration of the registry key generated by the GPO. use RegRead() for that.

Edited December 5, 2018 by orbs

[sadakathullah]

Hi Orbs,  The restricted settings also blocks built-in Snipping Tool. Basically the windows image is free from any tool or application that allows me to take a screen shot. I am unable to check it. I will give a try using RegRead(). Thanks for your suggestion.