PC Professionell 2006 May

home *** CD-ROM | disk | FTP | other *** search

/ PC Professionell 2006 May / PCpro_2006_05.ISO / files / free_security / msshared / Shared_Computer_Toolkit_ENU.msi / FileScripts009 < prev next >

Wrap

Extensible Markup Language | 2005-09-02 | 23.4 KB | 310 lines

■<?xml version="1.0" ?> <package> <comment> ' *** ' *** ------------------------------------------------------------------------------ ' *** Filename: CriticalUpdates.wsf ' *** ------------------------------------------------------------------------------ ' *** Description: Downloads Critical Updates and Commits Windows Disk Protection ' *** ------------------------------------------------------------------------------ ' *** Version: 1.0 ' *** Notes: ' *** ------------------------------------------------------------------------------ ' *** Copyright (C) Microsoft Corporation 2005, All Rights Reserved ' *** ------------------------------------------------------------------------------ ' *** </comment> <job> <runtime> <description>Critical Updates</description> <named name="Update" required="false" many="false" helpstring="Downloads and installs Critical Updates" /> <named name="Restart" required="false" many="false" helpstring="Restart the computer after the Critical Updates process" /> <named name="EnableLogin" required="false" many="false" helpstring="Use only if Critical Updates fails to enable accounts" /> <example>Example: CriticalUpdates.wsf /Update /Restart</example> </runtime> <resource id="CScriptMessage">Restarting script in command-line mode. Run CmdOn.BAT to set command-line mode as the default mode.</resource> <resource id="CScriptTitle">Shared Computer Toolkit: Windows Script Mode Detected</resource> <?job error="True" debug="False" ?> <script language="VBScript" src="../include/Common.vbs"></script> <script language="VBScript" src="../include/libWSF.vbs"></script> <script language="VBScript" src="../include/clsDiskProtect.vbs"></script> <script language="VBScript" src="../include/clsLogging.vbs"></script> <script language="VBScript"> <![CDATA[ ' ~~~ ' ~~~ Force variables to be declared ' ~~~ Option Explicit ' ~~~ Do Not Call Main here... we do not need all those checks in this script Call InitialiseAllObjects() If IsAdministrator(False) = False Then ' ~~~ Should be an administrator to use this tool QuitScript() End If ' ~~~ ' ~~~ Declare variables and constants ' ~~~ Dim oDiskProtect, iWDPcmdver, iCriticalUpdateMins, oLog Dim sAppDir, sCmd1, sCmd2, sCmd3, bOK Dim colItems, oItem, sInstaller, oUser Dim colOperatingSystems, oOS, iLastBootUpTime, iLocalDateTime, iFirstTaskTime ' ~~~ ------------------------------------------------------------------------------ ' ~~~ Logging ' ~~~ ------------------------------------------------------------------------------ ' ~~~ Create logging object Set oLog = New Logging ' ~~~ Initiate logging Call oLog.Open(GetRootFolder & "\log\CriticalUpdates.wsf.log") Call oLog.Write("CriticalUpdates.wsf : Started") ' ~~~ Set the WDP.CMD tool version number for CriticalUpdates.wsf iWDPcmdVer = 8 ' ~~~ Create objects Set oDiskProtect = New DiskProtect sAppDir = RegRead(TOOLKITKEY & "TargetDir") If Not(oDiskProtect.Enabled) Then ' ~~~ ------------------------------------------------------------------------------ ' ~~~ Delete any WDP AT commands left behind ' ~~~ ------------------------------------------------------------------------------ Call oDiskProtect.DefineATCommands sCmd1 = oDiskProtect.sCmd1 sCmd2 = oDiskProtect.sCmd2 sCmd3 = oDiskProtect.sCmd3 Call oDiskProtect.DeleteScheduleTask(sCmd1) Call oDiskProtect.DeleteScheduleTask(sCmd2) Call oDiskProtect.DeleteScheduleTask(sCmd3) Call oShell.Run(chr(34) & sAppDir & "bin\schtasks.exe" & chr(34) & " /Delete /TN SCTWakeUpPC /F", 0, True) ' ~~~ Prevents computer from restarting if no WDP and AT command runs. If WScript.Arguments.Named.Exists("PreventLogin") Then QuitScript() End If End If ' ~~~ ------------------------------------------------------------------------------ ' ~~~ Check script usage ' ~~~ ------------------------------------------------------------------------------ ' ~~~ Assume usage is ok bOK = True ' ~~~ Simple checks for incorrect usage Select Case WScript.Arguments.Named.Count Case 0 ' ~~~ Can not call with no parameters bOK = False End Select ' ~~~ If incorrect usage display message and quit If Not(bOK) Then WScript.Arguments.ShowUsage QuitScript() End If ' ~~~ Disable Login - Do not run with this switch from command line! If WScript.Arguments.Named.Exists("PreventLogin") Then If WScript.Arguments.Named.Exists("Update") Then Call oShell.Run(chr(34) & sAppDir & "bin\ForceLogoff.exe" & chr(34) & " /Logoff", 0, True) Call PreventLogin Call oLog.Write("CriticalUpdates.wsf : PreventLogin called... users cannot log in") Else WScript.Arguments.ShowUsage QuitScript() End If End If If WScript.Arguments.Named.Exists("EnableLogin") Then If WScript.Arguments.Named.Exists("Update") or WScript.Arguments.Named.Exists("PreventLogin") Then WScript.Arguments.ShowUsage QuitScript() Else Call AllowLogin Call oLog.Write("CriticalUpdates.wsf : EnableLogin - AllowLogin called... users can now log in") QuitScript() End If End If ' ~~~ Run scripts If WScript.Arguments.Named.Exists("Update") Then Call ReadRegRun(TOOLKITKEY & "AVUpdateScript") Call oLog.Write("CriticalUpdates.wsf : specified AVUpdate script started: " & RegRead(TOOLKITKEY & "AVUpdateScript")) Call ReadRegRun(TOOLKITKEY & "OtherUpdateScript") Call oLog.Write("CriticalUpdates.wsf : specified OtherUpdate script started: " & RegRead(TOOLKITKEY & "OtherUpdateScript")) Call ReadRegRun(TOOLKITKEY & "WindowsUpdateScript") Call oLog.Write("CriticalUpdates.wsf : specified WindowsUpdate script started: " & RegRead(TOOLKITKEY & "WindowsUpdateScript")) Call oLog.Write("CriticalUpdates.wsf : Update scripts completed") End If ' ~~~ PreventLogin should only ever be run non-interactively, from the WDP AT scheduled task If WScript.Arguments.Named.Exists("PreventLogin") Then ' ~~~ Gets time of last restart and first task Set colOperatingSystems = oWMIService.ExecQuery _ ("Select * from Win32_OperatingSystem") For Each oOS in colOperatingSystems iLastBootUpTime = oOS.LastBootUpTime iLocalDateTime = oOS.LocalDateTime Next iFirstTaskTime = Left(iLocalDateTime,8) & RegRead(TOOLKITKEY & "SCTRestart") & ".000000" & Right(iLocalDateTime,4) If iFirstTaskTime > iLastBootUpTime Then ' ~~~ Commit windows disk protection unless in retain changes mode If oDiskprotect.Enabled and (oDiskProtect.BootCommand <> "NO_CMD") Then Call oDiskProtect.Commit Call oLog.Write("CriticalUpdates.wsf : WDP Commit issued for next restart") End If End If ' ~~~ Pause while concurrent updates may be applied iCriticalUpdateMins = 0 iCriticalUpdateMins = CInt(RegRead(TOOLKITKEY & "CriticalUpdateMins")) Call oLog.Write("CriticalUpdates.wsf : Waiting for " & iCriticalUpdateMins & " minutes before shutting down computer") WScript.Sleep(iCriticalUpdateMins * 60 * 1000) ' ~~~ Allow local users to log in again Call AllowLogin Call oLog.Write("CriticalUpdates.wsf : AllowLogin called... users can now log in") Else ' ~~~ Commit windows disk protection unless in retain changes mode when not run from WDP AT task If oDiskprotect.Enabled and (oDiskProtect.BootCommand <> "NO_CMD") Then Call oDiskProtect.Commit Call oLog.Write("CriticalUpdates.wsf : WDP Commit issued for next restart") Wscript.echo "Windows Disk Protection has been set to save changes with the next restart." End If End If ' ~~~ Restart the computer (or shut down the computer if SleepWakePC has been used) If WScript.Arguments.Named.Exists("Restart") Then ' ~~~ If run non-interactively and the PC is configured by SleepWakePC, then shut down the computer to conserve power. If WScript.Arguments.Named.Exists("PreventLogin") and RegRead(TOOLKITKEY & "SCTWakePC") = "Yes" Then Call oLog.Write("CriticalUpdates.wsf : XPePM shutting down computer") Call oShell.Run(chr(34) & sAppDir & "bin\XPePM.exe" & chr(34) & " -shutdown", 0, True) Else Call oLog.Write("CriticalUpdates.wsf : Calling restart method... computer will restart") Call oShell.Run(chr(34) & sAppDir & "bin\ForceLogoff.exe" & chr(34) & " /Restart", 0, True) End If Else Wscript.echo "Please restart your machine to ensure all Critical Updates are completely installed." End If ' ~~~ Destroy objects Set oDiskProtect = Nothing UnLoadObjects() ' ~~~ All done! QuitScript() ' *** ' *** ------------------------------------------------------------------------------ ' *** Name: ReadRegRun ' *** ------------------------------------------------------------------------------ ' *** Purpose: Reads a reg key and runs the script it points to ' *** ------------------------------------------------------------------------------ ' *** Sub ReadRegRun(sRegKey) Dim sScript ' ~~~ Read script to run from registry... sScript = oShell.RegRead(sRegKey) ' ~~~ If regvalue is blank exit If sScript="" Then Exit Sub ' ~~~ If it is a script, run it with cscript If (UCase(Right(sScript,3)) = "VBS") or (UCase(Right(sScript,3)) = "WSF") Then sScript = "cscript """ & sScript & """" Else sScript = """" & sScript & """" End If ' ~~~ Run script Call oShell.Run(sScript, 0, True) End Sub ' *** ' *** ------------------------------------------------------------------------------ ' *** Name: PreventLogin ' *** ------------------------------------------------------------------------------ ' *** Purpose: Disables interactive logins during Critical Updates ' *** ------------------------------------------------------------------------------ ' *** Sub PreventLogin ' ~~~ Turn on error handling On Error Resume Next sInstaller = RegRead(TOOLKITKEY & "SCTInstaller") Set colItems = oWMIService.ExecQuery _ ("Select * from Win32_UserAccount Where LocalAccount = True") For Each oItem in colItems If oItem.SIDType = 1 and Not(Right(oItem.SID,4) ="-500") and Not(oItem.Name = sInstaller) and oItem.Status = "OK" then Set oUser = GetObject("WinNT://./" & oItem.Name) oUser.Description = "SCTDisabled" oUser.AccountDisabled = True oUser.setinfo End If Next ' ~~~ Destroy objects Set colItems = Nothing set oUser = Nothing End Sub ' *** ' *** ------------------------------------------------------------------------------ ' *** Name: AllowLogin ' *** ------------------------------------------------------------------------------ ' *** Purpose: Allows interactive logins after Critical Updates ' *** ------------------------------------------------------------------------------ ' *** Sub AllowLogin ' ~~~ Turn on error handling On Error Resume Next Set colItems = oWMIService.ExecQuery _ ("Select * from Win32_UserAccount Where LocalAccount = True") For Each oItem in colItems If oItem.Description = "SCTDisabled" then Set oUser = GetObject("WinNT://./" & oItem.Name) oUser.Description = "" oUser.AccountDisabled = False oUser.setinfo End If Next ' ~~~ Destroy objects Set colItems = Nothing Set oUser = Nothing End Sub ]]> </script> </job> </package>