利用VBS腳本自動創(chuàng)建計算機帳戶的代碼

2020-03-24 17:26:30

字體：大中小

來源：轉載

供稿：網友

mcse注:其實這是按照ADSI(Active Directory Services Interface:活動目錄服務接口)寫的程序。如果你安裝了resource kit，這段代碼可以用netcom這條命令進行工作，下面是netcom的一個例子:

NETDOM /Domain:MYDOMAIN /user:adminuser /password:apassword MEMBER MYCOMPUTER /ADD

復制代碼代碼如下:
***********************

'* Start Script

'***********************

Dim sComputerName, sUserOrGroup, sPath, computerContainer, rootDSE, lFlag

Dim secDescriptor, dACL, ACE, oComputer, sPwd

'

'* Declare constants used in defining the default location for the

'* machine account, flags to identify the object as a machine account,

'* and security flags

'Const UF_WORKSTATION_TRUST_ACCOUNT = &H1000

Const UF_ACCOUNTDISABLE = &H2

Const UF_PASSWD_NOTREQD = &H20

Const ADS_GUID_COMPUTRS_CONTAINER = "aa312825768811d1aded00c04fd8d5cd"

Const ADS_ACETYPE_ACCESS_ALLOWED = 0

Const ADS_ACEFLAG_INHERIT_ACE = 2

'

'* Set the flags on this object to identify it as a machine account

'* and determine the name. The name is used html' target='_blank'>statically here, but may

'* be determined by a command line parameter or by using an InputBox

'lFlag = UF_WORKSTATION_TRUST_ACCOUNT Or UF_ACCOUNTDISABLE Or UF_PASSWD_NOTREQD

sComputerName = "TestAccount"

'

'* Establish a path to the container in the Active Directory where

'* the machine account will be created. In this example, this will

'* automatically locate a domain controller for the domain, read the

'* domain name, and bind to the default "Computers" container

'*********************************************************************

Set rootDSE = GetObject("LDAP://RootDSE")

sPath = "LDAP:// Set computerContainer = GetObject(sPath)

sPath = "LDAP://" & computerContainer.Get("distinguishedName")

Set computerContainer = GetObject(sPath)

''* Here, the computer account is created. Certain attributes must

'* have a value before calling .SetInfo to commit (write) the object

'* to the Active Directory

'Set oComputer = computerContainer.Create("computer", "CN=" & sComputerName)

oComputer.Put "samAccountName", sComputerName + "$"

oComputer.Put "userAccountControl", lFlag

oComputer.SetInfo

'

'* Establish a default password for the machine account

'sPwd = sComputerName & "$"

sPwd = LCase(sPwd)

oComputer.SetPassword sPwd

''* Specify which user or group may activate/join this computer to the

'* domain. In this example, "MYDOMAIN" is the domain name and

'* "JoeSmith" is the account being given the permission. Note that

'* this is the downlevel naming convention used in this example.

'sUserOrGroup = "MYDOMAIN/joesmith"

''* Bind to the Discretionary ACL on the newly created computer account

'* and create an Access Control Entry (ACE) that gives the specified

'* user or group full control on the machine account

'Set secDescriptor = oComputer.Get("ntSecurityDescriptor")

Set dACL = secDescriptor.DiscretionaryAcl

Set ACE = CreateObject("AccessControlEntry")

'

'* An AccessMask of "-1" grants Full Control

'

ACE.AccessMask = -1

ACE.AceType = ADS_ACETYPE_ACCESS_ALLOWED

ACE.AceFlags = ADS_ACEFLAG_INHERIT_ACE

''* Grant this control to the user or group specified earlier.

'ACE.Trustee = sUserOrGroup

'

'* Now, add this ACE to the DACL on the machine account

'dACL.AddAce ACE

secDescriptor.DiscretionaryAcl = dACL

'

'* Commit (write) the security changes to the machine account

'oComputer.Put "ntSecurityDescriptor", Array(secDescriptor)

oComputer.SetInfo

''* Once all parameters and permissions have been set, enable the

'* account.

'

oComputer.AccountDisabled = False

oComputer.SetInfo

''* Create an Access Control Entry (ACE) that gives the specified user

'* or group full control on the machine account

'wscript.echo "The command completed successfully."

'*****************

'* End Script

html教程

鄭重聲明：本文版權歸原作者所有，轉載文章僅為傳播更多信息之目的，如作者信息標記有誤，請第一時間聯(lián)系我們修改或刪除，多謝。

上一篇：VBScript教程第十課 VBScript編碼約定

下一篇：VBS腳本加密-解密VBS腳本(簡易免殺版1.1)