PC Professionell 2006 May

home *** CD-ROM | disk | FTP | other *** search

/ PC Professionell 2006 May / PCpro_2006_05.ISO / files / free_security / msshared / Shared_Computer_Toolkit_ENU.msi / FileScripts011 < prev next >

Wrap

Extensible Markup Language | 2005-09-02 | 21.9 KB | 288 lines

■<?xml version="1.0" ?> <package> <comment> ' *** ' *** ------------------------------------------------------------------------------ ' *** Filename: Restrict.wsf ' *** ------------------------------------------------------------------------------ ' *** Description: Command line interface to the restrictions tool ' *** This file parses command line parameters an calls functions ' *** that are defined in clsRestrictions.vbs ' *** ------------------------------------------------------------------------------ ' *** Version: 1.0 ' *** Notes: ' *** ------------------------------------------------------------------------------ ' *** Copyright (C) Microsoft Corporation 2005, All Rights Reserved ' *** ------------------------------------------------------------------------------ ' *** </comment> <job> <runtime> <description>Restrictions Tool</description> <named name="User" required="false" many="false" helpstring="Local User account name to modify." /> <named name="Create" required="false" many="false" helpstring="Creates an XML file for this user." /> <named name="Apply" required="false" many="false" helpstring="Applies an XML file for this user." /> <named name="Accounts" required="false" many="false" helpstring="List user accounts that can be restricted." /> <named name="XML" required="false" many="false" helpstring="File name of user's XML file." /> <named name="Lock" required="false" many="false" helpstring="Lock a user's profile." /> <named name="Unlock" required="false" many="false" helpstring="Unlock a user's profile." />  <usage> User Restrictions Tool Usage: Restrict.wsf [/User:username] [/Create] [/Apply] [/Accounts] [/XML:filename.xml] [/Lock] [/Unlock] Options : User : Local User account name to modify. Create : Creates an XML file for this user. Apply : Applies an XML file for this user. Accounts: List user accounts that can be restricted. XML : File name of user's XML file. Lock : Lock a user's profile. Unlock : Unlock a user's profile. Example : Restrict.wsf /User:TestUser /XML:..\xml\User.Student.xml /Apply </usage> </runtime> <resource id="CScriptMessage">Restarting script in command-line mode. Run CmdOn.BAT to set command-line mode as the default mode.</resource> <resource id="CScriptTitle">Shared Computer Toolkit: Windows Script Mode Detected</resource> <resource id="LockFolderExists">Previously locked profile folder exists. Do you wish to use the same folder for locking this profile?(Y/N)</resource> <resource id="FAT32LockProfile">The profile is located on a non NTFS drive. Lock option is not supported for profiles in non NTFS drives.</resource> <?job error="True" debug="False" ?> <script language="VBScript" src="../include/Common.vbs"></script> <script language="VBScript" src="../include/libWSF.vbs"></script> <script language="VBScript" src="../include/clsLogging.vbs"></script> <script language="VBScript" src="../include/clsRestrictions.vbs"></script> <script language="VBScript"> <![CDATA[ ' ~~~ ' ~~~ Force variables to be declared ' ~~~ Option Explicit Call Main("Restrict.hta") ' ~~~ ' ~~~ Declare variables and constants ' ~~~ Dim oRestriction, oLog, bResult, bOK, sCmdInput ' ~~~ ------------------------------------------------------------------------------ ' ~~~ Logging ' ~~~ ------------------------------------------------------------------------------ ' ~~~ Create logging object Set oLog = New Logging ' ~~~ Initiate logging Call oLog.Open(GetRootFolder & "\log\Restrict.wsf.log") Call oLog.Write("Restrict.wsf : Started") ' ~~~ Create winrestriction object Set oRestriction = New Restriction ' ~~~ ------------------------------------------------------------------------------ ' ~~~ Check script usage ' ~~~ ------------------------------------------------------------------------------ ' ~~~ Simple checks for incorrect usage bOK = True Select Case WScript.Arguments.Named.Count Case 1 If Not(WScript.Arguments.Named.Exists("Accounts")) Then bOK=False End If Case 2 If NOT (WScript.Arguments.Named("User") = "") Then IsValidUser(WScript.Arguments.Named("User")) End If End Select ' ~~~ Incorrect usage If Not(bOK) Then Call oLog.Write("Restrict.wsf : Incorrect usage detected") WScript.Arguments.ShowUsage QuitScript() End If ' ~~~ ------------------------------------------------------------------------------ ' ~~~ Now do restrictions ' ~~~ ------------------------------------------------------------------------------ ' ~~~ Bind to the logging object oRestriction.Logging = oLog ' ~~~ Set the user & source template oRestriction.User = WScript.Arguments.Named("User") oRestriction.TemplateXML = GetRootFolder & "\xml\" & GetFileName & ".xml" Call oLog.Write("Restrict.wsf : XML template set to " & oRestriction.TemplateXML) bOK = False ' ~~~ Specify the location of the xml file If WScript.Arguments.Named.Exists("xml") Then bOK = True oRestriction.UserXML = WScript.Arguments.Named("xml") Call oLog.Write("Restrict.wsf : XML - Filename set to " & oRestriction.UserXML) End If ' ~~~ Call the Validations subroutine Call Validations() ' ~~~ Create users XML file If WScript.Arguments.Named.Exists("Create") Then bOK = True If oRestriction.CreateXML Then Call oLog.Write("Restrict.wsf : Create - XML file created successfully") WScript.Echo "XML file created successfully" Else Call oLog.Write("Restrict.wsf : Create - Failed to create XML file") WScript.Echo "Failed to create XML file" bOK = False End If End If ' ~~~ Apply users XML file If WScript.Arguments.Named.Exists("Apply") Then IsValidUser(oRestriction.User) oRestriction.IsProfileDriveNTFS = oRestriction.IsFileSystemNTFS() bOK = True If oRestriction.ApplyXML Then Call oLog.Write("Restrict.wsf : Apply - XML file applied successfully") WScript.Echo "XML file applied successfully" Else Call oLog.Write("Restrict.wsf : Apply - Failed to apply XML file") WScript.Echo "Failed to apply XML file" bOK = False End If End If ' ~~~ Lock a users profile If WScript.Arguments.Named.Exists("Lock") Then bOK = True If NOT oRestriction.IsFileSystemNTFS Then Wscript.echo getResource("FAT32LockProfile") QuitScript() End If If oRestriction.AccountLocked(oRestriction.User) = False AND oFso.FolderExists(oRestriction.GetProfilePath(oRestriction.User) & ".orig") Then Do Wscript.stdout.writeline getResource("LockFolderExists") sCmdInput = UCase(Wscript.StdIn.ReadLine) If sCmdInput = "Y" Then oRestriction.ChangeLockFolder = False Exit Do End If If sCmdInput = "N" Then oRestriction.ChangeLockFolder = True Exit Do End If Loop Until sCmdInput = "Y" OR sCmdInput = "N" End If If oRestriction.LockSharedAccount(oRestriction.User) Then Call oLog.Write("Restrict.wsf : Lock - Profile locked successfully") WScript.Echo "Profile locked successfully" Else Call oLog.Write("Restrict.wsf : Lock - Failed to unlock profile") WScript.Echo "Failed to lock profile" bOK = False End If End If ' ~~~ Unlock a users profile If WScript.Arguments.Named.Exists("Unlock") Then bOK = True If oRestriction.UnlockSharedAccount(oRestriction.User) Then Call oLog.Write("Restrict.wsf : Unlock - Profile locked successfully") WScript.Echo "Profile unlocked successfully" Else Call oLog.Write("Restrict.wsf : Unlock - Failed to unlock profile") WScript.Echo "Failed to unlock profile" bOK = False End If End If ' ~~~ Display accounts list If WScript.Arguments.Named.Exists("Accounts") Then bOK = True WSCript.Echo "Accounts that can have restrictions applied :" WSCript.Echo oRestriction.Accounts(False) End If If Not(bOK) Then Call oLog.Write("Restrict.wsf : Incorrect usage detected") WScript.Arguments.ShowUsage QuitScript() End If ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: IsValidUser(UserID) ' *** -------------------------------------------------------------------------------- ' *** Purpose: Checks for the validity of the useraccount ' *** -------------------------------------------------------------------------------- ' *** Sub IsValidUser(UserID) Dim bValid bValid = True If oNetwork.UserName = UserID Then WSCript.Echo "This tool will not modify the currently logged on user." bValid = False ElseIf Right(oRestriction.GetUserSID(UserID),4) = "-500" Then ' ~~~ Administrator account WSCript.Echo "This tool cannot modify the Administrator account." bValid = False ElseIf oRestriction.GetUserSID(UserID) = "" Then WSCript.Echo "This is not a valid user account." bValid = False ElseIf oRestriction.GetProfilePath(UserID) = "" Then WSCript.Echo " A profile is not created for this user account." bValid = False ElseIf oRestriction.IsUserLoggedOn(UserID) Then WSCript.Echo "The user is currently logged on through fast-user-switching." bValid = False End If If NOT bValid Then WScript.Arguments.ShowUsage QuitScript() End If End Sub ' *** ' *** -------------------------------------------------------------------------------- ' *** Name: Validations() ' *** -------------------------------------------------------------------------------- ' *** Purpose: Validates the combinations of options in the input arguments ' *** -------------------------------------------------------------------------------- ' *** Sub Validations() If ( WScript.Arguments.Named.Exists("Lock") and WScript.Arguments.Named.Exists("UnLock")) Then Call oLog.Write("Restrict.wsf : Incorrect usage detected") WScript.Arguments.ShowUsage QuitScript() End If If ( WScript.Arguments.Named.Exists("Create") and WScript.Arguments.Named.Exists("Apply")) Then Call oLog.Write("Restrict.wsf : Incorrect usage detected") WScript.Arguments.ShowUsage QuitScript() End If End Sub ' ~~~ ------------------------------------------------------------------------------ ' ~~~ Tidy up ' ~~~ ------------------------------------------------------------------------------ ' ~~~ Close log Call oLog.Close ' ~~~ Destroy objects Set oRestriction = nothing Set oLog = nothing UnLoadObjects() ]]> </script> </job> </package>