Twice Shell

[ EDITING: CL_Utility.ps1 ]

#get item property value from registry property
function GetItemPropertyValue([string]$reg_path = $(throw "No registry path is specified"), [string]$propertyname = $(throw "no registry path is specified"))
{
    return (Get-ItemProperty $reg_path $propertyname -ErrorAction silentlycontinue)
}

function CreateRegObject([string]$reg_path = $(throw "No registry path is specified"),[string]$value_name = $(throw "No registry value name is specified"), [string]$regitemvalue_original = $(throw "No original registry value is specified"), [string]$regitemvalue_reset = $(throw "No new registry value is specified"))
{
    $regitemvalue_original = $regitemvalue_original
    $regitemvalue_reset = $regitemvalue_reset
    $regitem = New-Object -TypeName System.Management.Automation.PSObject -ErrorAction Stop
    $regpath = $reg_path.replace("Registry::","")
    $valuename = $value_name

Add-Member -InputObject $regitem -MemberType NoteProperty -Name "reg_path"-Value $regpath -ErrorAction Stop
    Add-Member -InputObject $regitem -MemberType NoteProperty -Name "value_name"-Value $valuename -ErrorAction Stop
    Add-Member -InputObject $regitem -MemberType NoteProperty -Name "regitemvalue_original"  -Value $regitemvalue_original -ErrorAction Stop
    Add-Member -InputObject $regitem -MemberType NoteProperty -Name "regitemvalue_reset"-Value $regitemvalue_reset -ErrorAction Stop

return $regitem
}

function UnderPolicySetting([string]$name = $(throw "No name is specified"), [string]$registrykey = $(throw "No registrykey is specified"))
{
    $result = $false
    $userID = ([Security.Principal.WindowsIdentity]::GetCurrent()).user.value.Replace('-', '_')
    $policysetting =  Get-WmiObject -Namespace "root\rsop\user\$userID" -query "select name, registrykey from RSOP_RegistryPolicySetting" | foreach ($_) {if ($_.registryKey -like "*Internet*") {$_}} | Select-Object name, registrykey
    if($PolicySetting -ne $null)
    {
        foreach($policyitem in $policysetting)
        {
            if(($policyitem.name -eq $name) -and ($policyitem.registrykey -eq $registrykey))
            {
                return $true
            }
        }
    }
    $key = get-item "Registry::HKEY_LOCAL_MACHINE\$registrykey"
    if($key-ne $null -and @($key.Property) -contains $name)
    {
        return $true
    }
    return $result
}

[ CLOSE ]

Name	Size	Attr	Date	Action
[DIR] en-US	-	----	18-09-15 14:37	REN ATTR DEL
[FILE] CL_Utility.ps1	2.40 KB	---A	18-09-15 12:42	DL REN ATTR DEL
[FILE] DiagPackage.diagpkg	7.31 KB	---A	18-09-15 12:42	DL REN ATTR DEL
[FILE] DiagPackage.dll	68.50 KB	---A	18-09-15 12:42	DL REN ATTR DEL
[FILE] IEsecuritysettings.ps1	16.25 KB	---A	18-09-15 12:42	DL REN ATTR DEL
[FILE] IESecurity_TroubleShooter.ps1	268 B	---A	18-09-15 12:42	DL REN ATTR DEL
[FILE] RS_Blockpopups.ps1	1.70 KB	---A	18-09-15 12:42	DL REN ATTR DEL
[FILE] RS_IESecuritylevels.ps1	1.05 KB	---A	18-09-15 12:42	DL REN ATTR DEL
[FILE] RS_PhishingFilter.ps1	3.12 KB	---A	18-09-15 12:42	DL REN ATTR DEL
[FILE] TS_Blockpopups.ps1	1.26 KB	---A	18-09-15 12:42	DL REN ATTR DEL
[FILE] TS_IEsecuritylevels.ps1	2.98 KB	---A	18-09-15 12:42	DL REN ATTR DEL
[FILE] TS_PhishingFilter.ps1	1.98 KB	---A	18-09-15 12:42	DL REN ATTR DEL

TWICE

[ EDITING: CL_Utility.ps1 ]