WSH and ADSI Administrative Scripting (Sams Other)

WSH and ADSI Administrative Scripting Gerry O’Brien 800 East 96th Street, Indianapolis, Indiana 46240 USA Copyright ...

393 downloads 1319 Views 2MB Size Report

This content was uploaded by our users and we assume good faith they have the permission to share this book. If you own the copyright to this book and it is wrongfully on our website, we offer a simple DMCA procedure to remove your content from our site. Start by pressing the button below!

Report copyright / DMCA form

DOWNLOAD PDF

WSH and ADSI Administrative Scripting Gerry O’Brien

800 East 96th Street, Indianapolis, Indiana 46240 USA

Copyright  2002 by Sams Publishing All rights reserved. No part of this book shall be reproduced, stored in a retrieval system, or transmitted by any means, electronic, mechanical, photocopying, recording, or otherwise, without written permission from the publisher. No patent liability is assumed with respect to the use of the information contained herein. Although every precaution has been taken in the preparation of this book, the publisher and author assume no responsibility for errors or omissions. Nor is any liability assumed for damages resulting from the use of the information contained herein. International Standard Book Number: 0-672-32250-1

ASSOCIATE PUBLISHER Jeff Koch

ACQUISITIONS EDITOR Neil Rowe

DEVELOPMENT EDITOR Steve Rowe

MANAGING EDITOR Matt Purcell

PROJECT EDITOR

Library of Congress Catalog Card Number: 2001093494

Andy Beaster

Printed in the United States of America

PRODUCTION EDITORS

First Printing: September 2001

Emylie Morgan Matt Wynalda

04

03

02

01

4

3

2

1

Trademarks All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capitalized. Sams Publishing cannot attest to the accuracy of this information. Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark.

INDEXER Tom Dinse

PROOFREADER Harvey Stanbrough

TECHNICAL EDITOR

Warning and Disclaimer

John Purdum

Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied. The information provided is on an “as is” basis. The author and the publisher shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this book.

TEAM COORDINATOR Vicki Harding

INTERIOR DESIGNER Anne Jones

COVER DESIGNER Aren Howell

PAGE LAYOUT Rebecca Harmon Lizbeth Patterson

Overview Introduction 1 CHAPTER

1

Introduction to Scripting 3

2

What’s New in WSH 5.6? 23

3

Creating Scripts 49

4

How to Use Your Scripts 79

5

Securing Your Scripts 101

6

Introduction to ADSI 119

7

ADSI Architecture 129

8

Using ADSI 141

9

Accessing Data with ADSI 161

10

Enumerating ADSI Objects 191

11

Searching Active Directory 199

12

ADSI Security 221

13

WSH and the .NET Framework 229

APPENDIX A

WSH Reference 239

B

ADSI Reference 301 Index 311

Contents Introduction

1

1

Introduction to Scripting 3 What Is Scripting? ..................................................................................4 Types of Scripting Languages ..........................................................5 Why Learn a Scripting Language at All? ..........................................6 Scripting Languages in Depth ................................................................8 VBScript ............................................................................................8 JScript ..............................................................................................11 Other Scripting Languages ..............................................................11 Various Types of Script Files ................................................................13 Batch Files ......................................................................................13 The Active Server Pages Script File ................................................14 HTML and DHTML ........................................................................15 JScript Files ....................................................................................17 VBScript Files ................................................................................18 Script Host Environments ....................................................................19 What Is Windows Script Host? ............................................................20 Summary ..............................................................................................22

2

What’s New in WSH 5.6? 23 Grouping Script Switches ....................................................................24 named Switches ................................................................................25 unnamed Switches ............................................................................26 Script Self-Documenting ......................................................................27 <example> ........................................................................................27 <description> ................................................................................28 Sharing the Environment ......................................................................28 Accessing Standard Streams Programmatically ..................................29 WshScriptExec Object ....................................................................29 Programmatically Accessing Environment Variables ....................30 Spawned Processes in WSH 5.6 ..........................................................33 Checking for Spawned Script Processes ........................................33 Accessing the Input Stream of a Spawned Process ........................34 Accessing the Output Stream of a Spawned Process ......................35 Accessing the StdErr Output Stream of a Spawned Process ..........................................................................35 Terminating Spawned Process Scripts ............................................35 Accessing Command-Line named Arguments ......................................36

Objects ..................................................................................37 Determining Whether Key Values Exist in a WshNamed Object ......37 Determining the Number of Switches in a WshNamed Object or WshUnnamed Object ..................................................................38 Remote Scripting ..................................................................................39 WshController Object ....................................................................39 CreateScript Method ....................................................................40 WshRemote Object ..................................................................................40 Execute Method ....................................................................................41 WshRemote Status ............................................................................41 WshRemoteError Object ..................................................................42 Description Property (WshRemoteError) ........................................42 Line Property (WshRemoteError) ....................................................43 Error Property (WshRemoteError) ..................................................43 Character Property ........................................................................43 Number Property ..............................................................................44 Source Property ..............................................................................44 SourceText Property ......................................................................44 Remote Object Events ....................................................................45 Accessing Active Directory Information with the CurrentDirectory Property ..............................................................................................45 Scripting Security ................................................................................46 Summary ..............................................................................................46 WshNamed

3

Creating Scripts 49 Tools for Creating Scripts ....................................................................50 Notepad as a Script Text Editor ......................................................50 TextPad as a Script Text Editor ......................................................52 Writing Scripts with Microsoft’s Visual Basic Integrated Development Environment ..........................................................53 Creating Reusable Scripts ....................................................................53 Linking Scripts ......................................................................................57 The WSH Object Model ......................................................................60 Using the WScript Object ................................................................62 Using the WshArguments Object ......................................................63 Using the WshNetwork Object ..........................................................64 Using the WshShell Object ..............................................................68 Summary ..............................................................................................77

4

How to Use Your Scripts 79 .wsf File Support ..................................................................................80 Use Statements and Include Statements ..........................................81 XML and WSH Files ......................................................................83

vi

WSH

AND

ADSI ADMINISTRATIVE SCRIPTING Using Multiple Languages in a WSH File ......................................85 Object-Oriented Capabilities in WSH Files ....................................86 Drag-and-Drop Support in Files ..........................................................88 Set Script Properties ............................................................................93 Setting Script File Properties to Create a .wsh File ........................93 Other Properties ..............................................................................95 Running Script Files from CScript.exe and WScript.exe ....................96 Scripting from the Command Line with CScript.exe ....................96 Running Script Files with WScript.exe ..........................................98 Summary ..............................................................................................99 5

Securing Your Scripts 101 Accessing the File System with Malicious Code ..............................102 Accessing Registries with Malicious Code ........................................102 Scripting with the CryptoAPI Tools ..................................................103 Public and Private Keys ................................................................104 Securing Scripts with Signing ............................................................105 Acquiring a Digital Certificate for Script Signing ........................106 Using Certificates to Sign Scripts ......................................................110 The Scripting.Signer Object ......................................................110 Establishing Trusts Within Scripts ......................................................115 Trust Policies ................................................................................116 WinTrust ........................................................................................117 Summary ............................................................................................118

6

Introduction to ADSI 119 The Active Directory Service Interfaces (ADSI) ..............................121 What Is ADSI Used For? ..............................................................121 Benefits of ADSI ..........................................................................122 Summary ............................................................................................127

7

ADSI Architecture 129 ADSI Objects ......................................................................................130 Object-Oriented Programming (OOP) Fundamentals ..................130 OOP Terminology ........................................................................131 Namespaces ........................................................................................135 ADSI Providers ..................................................................................136 ADSI Schema Model ..........................................................................138 Programming Language Support ........................................................138 Summary ............................................................................................140

8

Using ADSI 141 Binding to ADSI Objects ....................................................................142 The ADSI Binding String ..............................................................143 Binding Types ................................................................................149

CONTENTS Binding Programmatically ............................................................152 Binding to ADSI with ActiveX Data Objects ..............................155 Summary ............................................................................................158 9

Accessing Data with ADSI 161 ADSI Properties and Attributes ..........................................................163 Working with ADSI Objects and Their Properties ............................163 Property Cache ....................................................................................164 Caching Internals ..........................................................................164 Single and Multiple Value Attributes ..................................................165 IADs and IDirectoryObject Interface ................................................166 Using IADs ....................................................................................166 Accessing Attributes ..........................................................................168 Get Method ....................................................................................169 Accessing ADSI Properties Directly ............................................169 GetEx Method ................................................................................170 GetInfo Method ............................................................................172 GetInfoEx for Optimization ..........................................................174 Modifying Attributes ..........................................................................177 Put Method ....................................................................................177 PutEx Method ................................................................................178 SetInfo Method ............................................................................180 Accessing the Property Cache Directly with the IADsProperty Interfaces ..........................................................................................181 ADSI Attribute Syntax ........................................................................182 BOOLEAN ..........................................................................................182 CASE_EXACT_STRING and CASE_IGNORE_STRING ..............................183 DN_STRING (Distinguished Name) ..................................................184 INTEGER ..........................................................................................184 LARGE_INTEGER ..............................................................................185 NUMERIC_STRING ............................................................................185 OBJECT_CLASS ................................................................................185 OCTET_STRING ................................................................................185 PRINTABLE_STRING ........................................................................186 SECURITY_DESCRIPTOR ..................................................................186 UTC_TIME ........................................................................................186 Collections and Groups ......................................................................187 Groups ..........................................................................................189 Summary ............................................................................................189

10

Enumerating ADSI Objects 191 Enumeration ........................................................................................192 Enumerating to Determine Object Properties ..............................194 Enumeration Help Functions ........................................................197 Summary ............................................................................................198

vii

viii

WSH

AND

ADSI ADMINISTRATIVE SCRIPTING

11

Searching Active Directory 199 Query Scope ........................................................................................200 Searching the Global Catalog ........................................................200 Query Depth ........................................................................................201 Base Query ....................................................................................201 One-Level ......................................................................................202 Subtree ..........................................................................................202 Working with Large Resultsets ..........................................................202 Creating Fast Queries ....................................................................202 Searches ..............................................................................................206 Search Attributes ..........................................................................206 Search Limits ................................................................................206 Asynchronous Searches ................................................................207 Search Filter Syntax ......................................................................208 Dialects Used for Searching Active Directory ..................................209 SQL Dialect ..................................................................................209 LDAP Dialect ................................................................................211 Processing Resultsets ..........................................................................212 Client-Side Caching ......................................................................213 Sorting ..........................................................................................213 Query Interfaces ............................................................................214 Summary ............................................................................................220

12

ADSI Security 221 Authentication ....................................................................................222 Authentication with the ADsOpenObject Function ........................222 Authentication via User Logon Credentials ..................................223 Access Control ....................................................................................224 Creating a Security Descriptor Object ................................................225 Enumerating ACLs on an ADSI Object ..............................................226 Summary ............................................................................................228

13

WSH and the .NET Framework 229 The .NET Common Language Runtime ............................................230 Where the .NET Components Will Be Found ..............................231 Languages in .NET ............................................................................231 VBScript ........................................................................................232 JScript ............................................................................................233 C++ ................................................................................................234 Visual Basic ..................................................................................235 C# ..................................................................................................236 Summary ............................................................................................237

CONTENTS A

WSH Reference 239 Objects ................................................................................................240 WScript ..........................................................................................240 WshArguments ................................................................................241 WshController ..............................................................................242 WshEnvironment ............................................................................242 WshNamed ........................................................................................243 WshNetwork ....................................................................................243 WshRemote ......................................................................................244 WshRemoteError ............................................................................245 WshScriptExec ..............................................................................246 WshShell ........................................................................................246 WshShortcut ..................................................................................247 WshSpecialFolders ......................................................................248 WshUnnamed ....................................................................................248 WshUrlShortcut ............................................................................249 Properties ............................................................................................250 Arguments ......................................................................................250 AtEndOfLine ..................................................................................251 AtEndOfStream ..............................................................................251 Character ......................................................................................251 Column ............................................................................................252 ComputerName ................................................................................252 CurrentDirectory ........................................................................252 Description ..................................................................................253 Environment ..................................................................................253 Error ..............................................................................................254 ExitCode ........................................................................................254 FullName (WScript) ......................................................................254 FullName (WshShortcut) ................................................................255 FullName (WshUrlShortcut) ..........................................................255 HotKey ............................................................................................256 IconLocation ................................................................................256 Interactive ..................................................................................257 Item ................................................................................................257 Item (WshNamed) ............................................................................257 Item (WshUnnamed) ........................................................................258 Length ............................................................................................258 Line (WScript) ..............................................................................258 Line (WshRemoteError) ..................................................................258 Name ................................................................................................259 Named ..............................................................................................259

ix

x

WSH

AND

ADSI ADMINISTRATIVE SCRIPTING ............................................................................................259 ................................................................................................260 ProcessID ......................................................................................260 RelativePath ................................................................................260 ScriptFullName ............................................................................261 ScriptName ....................................................................................261 Source ............................................................................................261 SourceText ....................................................................................262 SpecialFolders ............................................................................262 Status (WshRemote) ......................................................................263 Status (WshScriptExec) ................................................................263 StdErr (WScript) ..........................................................................264 StdErr (WshScriptExec) ................................................................264 StdIn (WScript) ............................................................................265 StdIn (WshScriptExec) ..................................................................265 StdOut (WScript) ..........................................................................265 StdOut (WshScriptExec) ................................................................265 TargetPath ....................................................................................266 UserDomain ....................................................................................266 UserName ........................................................................................266 Version ..........................................................................................267 WindowStyle ..................................................................................267 WorkingDirectory ..........................................................................268 Methods ..............................................................................................268 AddPrinterConnection ..................................................................269 AddWindowsPrinterConnection ....................................................269 AppActivate ..................................................................................270 Close ..............................................................................................270 ConnectObject ..............................................................................271 Count ..............................................................................................271 CreateObject ................................................................................272 CreateScript ................................................................................272 CreateShortcut ............................................................................273 DisconnectObject ........................................................................273 Echo ................................................................................................274 EnumNetworkDrives ......................................................................274 EnumPrinterConnections ..............................................................274 Exec ................................................................................................275 Execute ..........................................................................................275 Exists ............................................................................................276 ExpandEnvironmentString ............................................................276 GetObject ......................................................................................276 Number Path

CONTENTS ..................................................................................277 ........................................................................................277 MapNetworkDrive ..........................................................................278 PopUp ..............................................................................................279 Quit ................................................................................................280 Read ................................................................................................280 ReadAll ..........................................................................................281 ReadLine ........................................................................................281 RegDelete ......................................................................................282 RegRead ..........................................................................................283 RegWrite ........................................................................................283 Remove ............................................................................................283 RemoveNetworkDrive ....................................................................284 RemovePrinterConnection ............................................................284 Run ................................................................................................285 Save ................................................................................................286 SendKeys ........................................................................................286 SetDefaultPrinter ......................................................................287 ShowUsage ......................................................................................288 Sign ................................................................................................288 SignFile ........................................................................................289 Skip ................................................................................................289 SkipLine ........................................................................................290 Sleep ..............................................................................................290 Terminate ......................................................................................291 Verify ............................................................................................291 VerifyFile ....................................................................................291 Write ..............................................................................................292 WriteBlankLines ..........................................................................293 WriteLine ......................................................................................293 Events ..................................................................................................293 End ................................................................................................293 Error ..............................................................................................294 Start ..............................................................................................294 XML Elements ....................................................................................294 ........................................................................................294 ........................................................................................294 <description> ..............................................................................295 <example> ......................................................................................295 <job> ..............................................................................................296 ..........................................................................................296