Whether you attempt to obfuscate the passwords or not is your business, but you're still giving them the passwords.

So long as the execution context of this script is the user you have to give them the passwords. Any obfuscation or encoding of the passwords that you perform is just a 'speed bump' for a determined user to find out what the passwords are. Double-clicking would still execute the Open command so the batch file executes as normal. I wrote a login script (batch file) for all users. Id like to do this with batch files so that I can change the Edit option to open the batch file with Notepad2. Search for Command Prompt, right-click the top result, and select the Run as administrator option. Often used by malware authors, this tricks text editing programs such as Notepad or Notepad++ into opening the file as if it were Unicode (when it is in-fact ASCII), resulting in garbled junk text. You could also edit command line options if you wanted. To users so they can use some software, but we don't want the user toīy definition the user's has to be able to recover the passwords in order to use them. A quick and easy way to obfuscate batch files is to add the string 'FF FE 0D 0A' at the start of the hex code (use a free hex editor). If the script can de-obfuscate the password so can the user.Īssuming you're trying to protect the passwords from the users who are allowed to execute the scripts, what you're saying isn't possible. Access to execute implies access to read. Users who are authorized to execute them, by definition, can read the passwords (in the obfuscated form, if you choose to obfuscate them). You can use NTFS ACLs to protect the files from users who are not authorized to execute them. Does the file open If so then you can edit batch files and something else is going on.

How to edit a batch file