anchor.diff:  reg export HKLM\Software\Microsoft\Windows\CurrentVersion\Run  Run.reg
   if %errorlevel%==1 echo Run processes failed to write
   goto MENU
  -
   :Three
   echo "OUTPUT DONE, CHANGING PASSWORD POLICIES!"
   REM Passwords must be 10 digits
  
positive.code: PAUSE
  net accounts
  goto MENU
  
  :Four
  REM Turn on UAC
  echo "TURNING ON UAC"
  reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 1 /f
  goto MENU
  
  :Five
  REM No Remote Desktop
  echo "DISABLING REMOTE DESKTOP"
  reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 1 /f
  reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v UserAuthentication /t REG_DWORD /d 0 /f
  goto MENU
  
  :Six
  REM Windows auomatic updates
  echo "ENABLING AUTO-UPDATES"
  reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v AUOptions /t REG_DWORD /d 3 /f
  goto MENU
  
  :Seven
  REM Removing good ol' insecure stuff
  echo "DISABLING WEAK SERVICES"
  
negative.code: if ERRORLEVEL 3 goto Three
  if ERRORLEVEL 2 goto Two
  if ERRORLEVEL 1 goto One
  :One
  REM Windows Defender scan 
  echo "SCANNING WITH DEFAULT WINDOWS DEFENDER!"
  