set REALM=realm.test
set LDAPSERVER=server.realm.test
set FILESERVER=fileserver.realm.test
set MACHINEPASSWORD=password

vcredist_x86.exe

ksetup /setdomain %REALM%
ksetup /addkdc %REALM% %LDAPSERVER%
ksetup /setcomputerpassword %MACHINEPASSWORD%
ksetup /mapuser * *

copy sspap3.dll C:\Windows\System32\
mkdir C:\logon
copy \\%FILESERVER%\common\localstartup.bat C:\logon\
copy sspap3registrypermissions.exe C:\logon\

regedit /S scap_base.reg
regedit /S scap_lsa_win8.reg
regedit /S scap_roaming_profiles.reg
regedit /S scap_winlogon.reg
regedit /S scap_delete_roaming.reg

net share netlogon=C:\logon

REM Install LDAP certificate
REM This is not needed for most users and workstations
REM copy \\%FILESERVER%\common\%LDAPSERVER%.ldap.crt C:\logon\ldap.crt
REM certmgr.exe -add -c "C:\logon\ldap.crt" -s -r localMachine root

REM Install print server certificate
copy \\%FILESERVER%\common\%PRINTSERVER%.cups.crt C:\logon\print.crt
certmgr.exe -add -c "C:\logon\print.crt" -s -r localMachine root

REM Install printer(s)
REM This is apparently broken on Windows 7 and up!
REM rundll32 printui.dll,PrintUIEntry /b "PrinterName" /x /n "part of the n switch" /if /f %windir%\inf\ntprint.inf /r "https://%PRINTSERVER%:631/printers/printername" /m "Printer Description"