windowswideopen.com

 

1. Download and install on the target computer the Windows resource kit utility Subinacl.
2.  Determine the target service name by opening the registry (Start -> Run -> Regedit) and navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<ServiceName> (If the service name contains spaces, the whole parameter should be enclosed in quotation marks.)
3. Open the CMD prompt and navigate to the folder in which the Subinacl tool is installed (Default: c:\Windows\Program Files\Windows Resource Kit\tools\)

Run the command SUBINACL /SERVICE \\MachineName\ServiceName /GRANT=[DomainName\]UserName[=Access] where ·  The user executing this command must have administrator rights in order for it to complete successfully.

·  If “MachineName” is omitted, the local machine is assumed.

·  If “DomainName” is omitted, the local machine is searched for the account.

·  Although the syntax example indicates a user name, this will work for user groups as well.

·  The values that ‘Access’ can take are:

   F : Full Control

   R : Generic Read

   W : Generic Write

   X : Generic eXecute

   L : Read controL

   Q : Query Service Configuration

   S : Query Service Status

   E : Enumerate Dependent Services

   C : Service Change Configuration

   T : Start Service

   O : Stop Service

   P : Pause/Continue Service

   I : Interrogate Service 

   U : Service User-Defined Control Commands

4. ·  If ‘Access’ is omitted then ‘F (Full Control)’ is assumed.

 

To automate the permission changes use the script below:

 

   strDomain   = Wscript.Arguments.Item(0)’domain where computer account is held

   strComputer = Wscript.Arguments.Item(1)’computer netbios name

   strSecPrinc = Wscript.Arguments.Item(2)’user’s login name as in: DomainNameUserName

   strAccess   = Wscript.Arguments.Item(3)’access granted, as per the list in the KB

   ‘bind to the specified computer

   set objTarget = GetObject(”WinNT://” & strDomain & “/” & strComputer & “,computer”)

   ‘create a shell object.  Needed to call subinacl later

   set objCMD = CreateObject(”Wscript.Shell”)

   ‘retrieve a list of services

   objTarget.filter = Array(”Service”)

   For each Service in objTarget

   ‘call subinacl to se the permissions

   command = “subinacl /service ” & Service.name & ” /grant=” & strSecPrinc & “=” & strAccess

   objCMD.Run command, 0

   ‘report the services that have been changed

   Wscript.Echo “User rights changed for ” & Service.name & ” service”

   next

The script should be saved as a .vbs file, such as “Services.vbs,” and called like this:

   CSCRIPT Services.vbs DomainName ComputerName UserName Access

 

grant permissions Operating System services vbscript Windows 2000 Windows 2003 Windows services Windows XPgrant permissions Operating System services vbscript Windows 2000 Windows 2003 Windows services Windows XP

No Comments »
Filed under: Operating System, vbscript, Windows XP, Windows 2000, Windows 2003, services

On Error Resume Next

Const ADS_SCOPE_SUBTREE = 2
Set objConnection = CreateObject(”ADODB.Connection”)
Set objCommand = CreateObject(”ADODB.Command”)
objConnection.Provider = “ADsDSOObject”
objConnection.Open “Active Directory Provider”
Set objCommand.ActiveConnection = objConnection
Set objDSE = GetObject(”LDAP://RootD
SE”)
strDomain = objDSE.Get(”DefaultNamingContext”)
objCommand.CommandText = “SELECT adspath,Name FROM ‘LDAP://” & strDomain & “‘ ” & “WHERE objectClass=’user’ and objectcategory=’person’ and lastlogontimestamp <=’00000000000′”
objCommand.Properties(”Page Size”) = 2000
objCommand.Properties(”Timeout”) = 30
objCommand.Properties(”Searchscope”) = ADS_SCOPE_SUBTREE
objCommand.Properties(”Cache Results”) = False
Set objRecordSet = objCommand.Execute
objRecordSet.MoveFirst
Do Until objRecordSet.EOF
strUserName = objRecordSet.Fields(”Name”).Value
WScript.Echo strUserName
objRecordSet.MoveNext
Loop
Active Directory vbscriptActive Directory vbscript

No Comments »
Filed under: vbscript, Active Directory

If you are interested in disabling the Windows product activation notices with a vbscript then the following steps maybe of interest to you:

1. In the root of your system drive save the following in a text file
2. Set objWMI = GetObject(”winmgmts:{impersonationLevel=
   impersonate}!\\” & computer & “\root\cimv2″)Set objWPA = objWMI.ExecQuery(”Select * from
   Win32_WindowsProductActivation”)

   For Each PA in objWPA
   PA.SetNotification(0)
   Next

3. Replace computer with the name of the target computer. Bolded items should be on the same line in the script.
4. Name the file deactivate.vbs
5. open a CMD prompt and change directory to c:>
6. Run the following command:
7. c:> cscript deactivate.vbs

impersonate vbscript windows product activationimpersonate vbscript windows product activation

No Comments »
Filed under: vbscript

If you every need to shutdown all you domain computers due to a expected power outage, security breach etc. then this Vbscript should help:
On Error Resume Next

Set objNet = CreateObject(”wscript.network”)
strCurrentPC = objNet.ComputerName

‘The following section will connect to any Active Directory domain

Const ADS_SCOPE_SUBTREE = 2
Set objConnection = CreateObject(”ADODB.Connection”)
Set objCommand = CreateObject(”ADODB.Command”)
objConnection.Provider = “ADsDSOObject”
objConnection.Open “Active Directory Provider”
Set objCommand.ActiveConnection = objConnection
Set objDSE = GetObject(”LDAP://RootDSE”)
strDomain = objDSE.Get(”DefaultNamingContext”)
objCommand.CommandText = “SELECT Name, Location FROM ‘LDAP://” & strDomain & “‘ ” & “WHERE objectClass=’computer’”
objCommand.Properties(”Page Size”) = 1000
objCommand.Properties(”Timeout”) = 30
objCommand.Properties(”Searchscope”) = ADS_SCOPE_SUBTREE
objCommand.Properties(”Cache Results”) = False
Set objRecordSet = objCommand.Execute
objRecordSet.MoveFirst
Do Until objRecordSet.EOF
strPCName = objRecordSet.Fields(”Name”).Value
If strPCName <> strCurrentPC then
set colOS = getobject(”winmgmts:{impersonationlevel=impersonate,(shutdown)}//” & strPCName).instancesof(”win32_operatingsystem”)
For each objOS in colOS
objOS.win32shutdown(1)
Next
End if
objRecordSet.MoveNext
Loop

======================================

This script can be easily modified to include other shutdown options which include reboots and log offs. Reference the Microsoft MSDN site: http://msdn2.microsoft.com/en-us/library/aa394058.aspx for more details on the win32shutdown class.

active directory adodb connection Operating System shutdown vbscriptactive directory adodb connection Operating System shutdown vbscript

No Comments »
Filed under: Operating System, vbscript

If you are a system administrator managing an Active Directory environment and you need to disable inactive user accoutns then the following vbscript may assist:

‘Queries AD for all WIndows domain accounts inactive for 12 weeks or more and disables these accounts

dsquery user -inactive 12 | dsmod user -disabled yes

‘Queries AD for all active directory disabled accounts and moves the accounts to the OU -disabled accounts. Script will not run if the # of domain accounts exceed 100
dsquery user -disabled | dsmove “ou=Disabled Accounts,dc=example,dc=net” -safety 100

Reference the Microsoft article: http://support.microsoft.com/kb/322684 for more details on dsquery and dsmod usage.

active directory disable domain user account dsmod dsquery vbscriptactive directory disable domain user account dsmod dsquery vbscript

No Comments »
Filed under: vbscript