group-policywindows
The two "Do not process the legacy run list" settings appear under Computer Configuration -> Polices -> Administrative Templates -> System -> Logon and under User Configuration -> Policies -> Administrative Templates -> System -> Logon respectively.
The documentation for these settings is confusing (i.e., wrong); what exactly do these two settings do, and how do they interact?
It's possible, yes.
Not really advisable, because the supported and recommended way to do this is through the gpedit.msc tool (or GPOs on a domain). As a result, doing it with a script is semi-documented at best, and you do run into some oddities trying.
If you're still determined to try, theses settings are really just registry keys. If can figure out which keys are changed, it's trivial to script something up to import all those registry keys and end up with the desired configuration. I'd just use a batch file, honestly.
The problem you'll run into, however, is that these changes need to be saved to %SYSTEM ROOT%\System32\GroupPolicy\User\Registry.pol to be enforced as local group policy, and I don't know of a good scripted solution to that, so the common workaround is to set this up the way you want on a second machine, and copy the %SYSTEM ROOT%\System32\GroupPolicy\User folder and files to your target machines.
I personally find the whole thing to be such a pain that I'd rather set up a small domain than go through that process to apply automate applying local group policy.
Best Answer
The actual behaviour (as observed in Windows 7 x64 SP1) is quite simple and intuitive:
The Computer Configuration setting disables the Run list that is found in this registry key:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceThe User Configuration setting disables the Run list that is found in this registry key:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceContrary to the documentation, the settings do not interact; configuring the computer setting does not affect the behaviour of the user setting.