I'm securing RDP by adding my SSL cert to my Windows host and of course, I'm working on scripting everything. I've got it 99% complete, the only step I can't figure out how to script is relating to permissions.
1.Start > Run > mmc
2.File > Add Remove Snap-in > Certficates > Add > Computer Account > Local Computer > OK
3.In the left-hand window right-click on Certificates (Local Computer)Personal, choose All Tasks/Import…
4.Locate the pfx file and import it, I suggest that for security reasons you don’t make it exportable.
5.Expanding your Personal/Certificates you should now see 3 certificates, one of which is your site certificate (e.g. mysite.com). Right-click on this site certificate and right-click, choose All Tasks / Manage Private Keys…
6.Add user ‘NETWORK SERVICE’ with Read permission only (not Full Control), then Apply
I'm trying to script step 6 in this guide. Does anybody have any ideas where to start?