From 34a6fb45a034707bd861f390091f1e3270dd2ffd Mon Sep 17 00:00:00 2001
From: Yorick <ephase@xieme-art.org>
Date: Wed, 16 Mar 2016 13:00:47 +0100
Subject: [PATCH] Lock GWX folder

---
 remove-kb.ps1 | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/remove-kb.ps1 b/remove-kb.ps1
index 38c9881..1a44453 100755
--- a/remove-kb.ps1
+++ b/remove-kb.ps1
@@ -102,6 +102,8 @@ takeown /F "$env:WINDIR\System32\GWX" /R /D $yes 2>&1 | Out-Null
 icacls "$env:WINDIR\System32\GWX" /C /grant $adminGroup":F" /T 2>&1 | Out-Null
 Try{ Remove-Item $env:WINDIR\System32\GWX\* -Force -Recurse -ErrorAction SilentlyContinue}
 Catch {Write-Host -ForegroundColor Red "Some files can't be deleted."}
+#lock GWX directory
+icacls "$env:WINDIR\System32\GWX" /deny Everyone:(CI)(OI)F 2>&1 | Out-Null
 
 
 Foreach($kbID in $kbIDs){