KB4577015 secpol.msc issue patcher

@echo off

:menu
echo KB4577015 secpol.msc issue patcher
echo 1 - fix
echo 2 - undo
echo 3 - exit

echo.
set /p option="choose an option: "
if not defined option goto menu
if "%option%"=="1" (goto fix)
if "%option%"=="2" (goto undo)
if "%option%"=="3" (exit)
exit

:fix
cls
reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SecEdit\Reg Values\MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/DontDisplayLockedUserId" /f >nul
echo fixed
echo.
goto menu

:undo
cls
@reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SecEdit\Reg Values\MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/DontDisplayLockedUserId" /f >nul
@reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SecEdit\Reg Values\MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/DontDisplayLockedUserId" /v DisplayChoices  /t REG_MULTI_SZ /d "1|@wsecedit.dll,-59025"\0"2|@wsecedit.dll,-59026"\0"3|@wsecedit.dll,-59027"\0"4|@wsecedit.dll,-59167" /f >nul
@reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SecEdit\Reg Values\MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/DontDisplayLockedUserId" /v DisplayName /t REG_SZ /d @wsecedit.dll,-59024 /f >nul
@reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SecEdit\Reg Values\MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/DontDisplayLockedUserId" /v DisplayType /t REG_DWORD /d 00000003 /f >nul
@reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SecEdit\Reg Values\MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/DontDisplayLockedUserId" /v ValueType /t REG_DWORD /d 00000004 /f >nul
echo reverted to KB4577015
echo.
goto menu