#Lockdown XLSM
#Run powershell as administrator
#Then double-click a non-threatening test.xlsm file.  Make a new text file and call it test.xlsm and put the word hello in it, Save as "test.xlsm"
cmd /c assoc .xlsm=xlsmxfile
cmd /c ftype xlsmxfile=%SystemRoot%\system32\NOTEPAD.EXE %1
#You may have to right click on the test.xlsm file, Properties, Change to notepad
#Undo Lockdown XLSM
#cmd /c assoc .xlsm=Excel.SheetMacroEnabled.12
#You may have to right click on the test.xlsm file, Properties, Change to Excel
md c:\utils
md c:\utils\MTI-Lockdown
cmd /c echo hello>c:\utils\MTI-Lockdown\test.xlsm
start c:\utils\MTI-Lockdown
timeout -1
del c:\utils\MTI-Lockdown\test.xlsm

#Lockdown HTA
#Then double-click a non-threatening test.hta file.  Make a new text file and call it test.hta and put the word hello in it, Save as "test.hta"
cmd /c assoc .hta=htaxfile
cmd /c ftype htaxfile=%SystemRoot%\system32\NOTEPAD.EXE %1
#You may have to right click on the test.hta file, Properties, Change to notepad
#Undo Lockdown HTA
#cmd /c assoc .hta=htafile
#You may have to right click on the test.hta file, Properties, Change to HTML Application (.hta)
cmd /c echo hello>c:\utils\MTI-Lockdown\test.hta
start c:\utils\MTI-Lockdown
timeout -1
del c:\utils\MTI-Lockdown\test.hta

#Lockdown DOCM
#Then double-click a non-threatening test.docm file.  Make a new text file and call it test.docm and put the word hello in it, Save as "test.docm"
cmd /c assoc .docm=docmxfile
cmd /c ftype docmxfile=%SystemRoot%\system32\NOTEPAD.EXE %1
#You may have to right click on the test.docm file, Properties, Change to notepad
#Undo Lockdown DOCM
#cmd /c assoc .docm=Word.DocumentMacroEnabled.12
#You may have to right click on the test.docm file, Properties, Change to Word
cmd /c echo hello>c:\utils\MTI-Lockdown\test.docm
start c:\utils\MTI-Lockdown
timeout -1
del c:\utils\MTI-Lockdown\test.docm

#Lockdown DOTM
#Then double-click a non-threatening test.dotm file.  Make a new text file and call it test.dotm and put the word hello in it, Save as "test.dotm"
cmd /c assoc .dotm=dotmxfile
cmd /c ftype dotmxfile=%SystemRoot%\system32\NOTEPAD.EXE %1
#You may have to right click on the test.dotm file, Properties, Change to notepad
#Undo Lockdown DOTM
#cmd /c assoc .dotm=Word.TemplateMacroEnabled.12
#You may have to right click on the test.dotm file, Properties, Change to Word
cmd /c echo hello>c:\utils\MTI-Lockdown\test.dotm
start c:\utils\MTI-Lockdown
timeout -1
del c:\utils\MTI-Lockdown\test.dotm

#Lockdown XLTM
#Then double-click a non-threatening test.xltm file.  Make a new text file and call it test.xltm and put the word hello in it, Save as "test.xltm"
cmd /c assoc .xltm=xltmxfile
cmd /c ftype xltmxfile=%SystemRoot%\system32\NOTEPAD.EXE %1
#You may have to right click on the test.xltm file, Properties, Change to notepad
#Undo Lockdown XLSM
#cmd /c assoc .xltm=Excel.TemplateMacroEnabled
#You may have to right click on the test.xltm file, Properties, Change to Excel
cmd /c echo hello>c:\utils\MTI-Lockdown\test.xltm
start c:\utils\MTI-Lockdown
timeout -1
del c:\utils\MTI-Lockdown\test.xltm

#Lockdown XLSB
#Then double-click a non-threatening test.xlsb file.  Make a new text file and call it test.xlsb and put the word hello in it, Save as "test.xlsb"
cmd /c assoc .xlsb=xlsbxfile
cmd /c ftype xlsbxfile=%SystemRoot%\system32\NOTEPAD.EXE %1
#You may have to right click on the test.xlsb file, Properties, Change to notepad
#Undo Lockdown XLSB
#cmd /c assoc .xlsb=Excel.SheetBinaryMacroEnabled.12
#You may have to right click on the test.xlsb file, Properties, Change to Excel
cmd /c echo hello>c:\utils\MTI-Lockdown\test.xlsb
start c:\utils\MTI-Lockdown
timeout -1
del c:\utils\MTI-Lockdown\test.xlsb

#Lockdown XLM
#Then double-click a non-threatening test.xlm file.  Make a new text file and call it test.xlm and put the word hello in it, Save as "test.xlm"
cmd /c assoc .xlm=xlmxfile
cmd /c ftype xlmxfile=%SystemRoot%\system32\NOTEPAD.EXE %1
#You may have to right click on the test.xlm file, Properties, Change to notepad
#Undo Lockdown XLM
#cmd /c assoc .xlm=Excel.Macrosheet
#You may have to right click on the test.xlm file, Properties, Change to Excel
cmd /c echo hello>c:\utils\MTI-Lockdown\test.xlm
start c:\utils\MTI-Lockdown
timeout -1
del c:\utils\MTI-Lockdown\test.xlm

#Lockdown SLDM
#Then double-click a non-threatening test.sldm file.  Make a new text file and call it test.sldm and put the word hello in it, Save as "test.sldm"
cmd /c assoc .sldm=sldmxfile
cmd /c ftype sldmxfile=%SystemRoot%\system32\NOTEPAD.EXE %1
#You may have to right click on the test.sldm file, Properties, Change to notepad
#Undo Lockdown SLDM
#cmd /c assoc .sldm=PowerPoint.SlideMacroEnabled.12
#You may have to right click on the test.sldm file, Properties, Change to Powerpoint
cmd /c echo hello>c:\utils\MTI-Lockdown\test.sldm
start c:\utils\MTI-Lockdown
timeout -1
del c:\utils\MTI-Lockdown\test.sldm

#Lockdown PPTM
#Then double-click a non-threatening test.pptm file.  Make a new text file and call it test.pptm and put the word hello in it, Save as "test.pptm"
cmd /c assoc .pptm=pptmxfile
cmd /c ftype pptmxfile=%SystemRoot%\system32\NOTEPAD.EXE %1
#You may have to right click on the test.pptm file, Properties, Change to notepad
#Undo Lockdown PPTM
#cmd /c assoc .pptm=PowerPoint.ShowMacroEnabled.12
#You may have to right click on the test.pptm file, Properties, Change to Powerpoint
cmd /c echo hello>c:\utils\MTI-Lockdown\test.pptm
start c:\utils\MTI-Lockdown
timeout -1
del c:\utils\MTI-Lockdown\test.pptm

#Lockdown POTM
#Then double-click a non-threatening test.potm file.  Make a new text file and call it test.potm and put the word hello in it, Save as "test.potm"
cmd /c assoc .potm=potmxfile
cmd /c ftype potmxfile=%SystemRoot%\system32\NOTEPAD.EXE %1
#You may have to right click on the test.potm file, Properties, Change to notepad
#Undo Lockdown POTM
#cmd /c assoc .potm=PowerPoint.TemplateMacroEnabled.12
#You may have to right click on the test.potm file, Properties, Change to Powerpoint
cmd /c echo hello>c:\utils\MTI-Lockdown\test.potm
start c:\utils\MTI-Lockdown
timeout -1
del c:\utils\MTI-Lockdown\test.potm

#Lockdown PPSM
#Then double-click a non-threatening test.ppsm file.  Make a new text file and call it test.ppsm and put the word hello in it, Save as "test.ppsm"
cmd /c assoc .ppsm=ppsmxfile
cmd /c ftype ppsmxfile=%SystemRoot%\system32\NOTEPAD.EXE %1
#You may have to right click on the test.ppsm file, Properties, Change to notepad
#Undo Lockdown PPSM
#cmd /c assoc .ppsm=PowerPoint.SlideShowMacroEnabled.12
#You may have to right click on the test.ppsm file, Properties, Change to Powerpoint
cmd /c echo hello>c:\utils\MTI-Lockdown\test.ppsm
start c:\utils\MTI-Lockdown
timeout -1
del c:\utils\MTI-Lockdown\test.ppsm

#Lockdown WSF
#Then double-click a non-threatening test.wsf file.  Make a new text file and call it test.wsf and put the word hello in it, Save as "test.wsf"
cmd /c assoc .WSF=WSFxfile
cmd /c ftype WSFxfile=%SystemRoot%\system32\NOTEPAD.EXE %1
#You may have to right click on the test.wsf file, Properties, Change to notepad
#Undo Lockdown WSF
#cmd /c assoc .WSF=WSFFile
#You may have to right click on the test.wsf file, Properties, Change to Windows Script Based Host
cmd /c echo hello>c:\utils\MTI-Lockdown\test.wsf
start c:\utils\MTI-Lockdown
timeout -1
del c:\utils\MTI-Lockdown\test.wsf

#Lockdown VBE
#Then double-click a non-threatening test.vbe file.  Make a new text file and call it test.vbe and put the word hello in it, Save as "test.vbe"
cmd /c assoc .VBE=VBExfile
cmd /c ftype VBExfile=%SystemRoot%\system32\NOTEPAD.EXE %1
#You may have to right click on the test.vbe file, Properties, Change to notepad
#Undo Lockdown VBE
#cmd /c assoc .VBE=VBEFile
#You may have to right click on the test.vbe file, Properties, Change to Windows Script Based Host
cmd /c echo hello>c:\utils\MTI-Lockdown\test.vbe
start c:\utils\MTI-Lockdown
timeout -1
del c:\utils\MTI-Lockdown\test.vbe

#Lockdown VBS
#Then double-click a non-threatening test.vbs file.  Make a new text file and call it test.vbs and put the word hello in it, Save as "test.vbs"
cmd /c assoc .vbs=VBSxfile
cmd /c ftype VBSxfile=%SystemRoot%\system32\NOTEPAD.EXE %1
#You may have to right click on the test.vbs file, Properties, Change to notepad
#Undo Lockdown VBS
#cmd /c assoc .vbs=VBSfile
#You may have to right click on the test.vbs file, Properties, Change to Windows Script Based Host
cmd /c echo hello>c:\utils\MTI-Lockdown\test.vbs
start c:\utils\MTI-Lockdown
timeout -1
del c:\utils\MTI-Lockdown\test.vbs