strDomainPasswd  =  “<DomainUserPasswd>”

strLocalUser       =  “<ComputerAdminUser>”  ‘  e.g.  administrator strLocalPasswd    =  “<ComputerUserPasswd>”

‘  ——  END  CONFIGURATION  ———

‘########################

‘  Constants

‘########################

Const  JOIN_DOMAIN                       =  1

Const  ACCT_CREATE                       =  2

Const  ACCT_DELETE                       =  4

Const  WIN9X_UPGRADE                    =  16

Const  DOMAIN_JOIN_IF_JOINED     =  32

Const  JOIN_UNSECURE                    =  64

Const  MACHINE_PASSWORD_PASSED  =  128

Const  DEFERRED_SPN_SET              =  256

Const  INSTALL_INVOCATION           =  262144

‘###########################

‘  Connect  to  Computer

‘###########################

set  objWMILocator  =  CreateObject(“WbemScripting.SWbemLocator”)

objWMILocator.Security_.AuthenticationLevel  =  6

set  objWMIComputer  =  objWMILocator.ConnectServer(strComputer,    _ “root\cimv2″,  _

strLocalUser,  _

strLocalPasswd)

set  objWMIComputerSystem  =  objWMIComputer.Get(  _ “Win32_ComputerSystem.Name=’”  &  _ strComputer  &  “‘”)

‘###########################

‘  Join  Computer

‘###########################

rc  =  objWMIComputerSystem.JoinDomainOrWorkGroup(strDomain,  _ strDomainPasswd,  _ strDomainUser,  _ vbNullString,  _ JOIN_DOMAIN)

if  rc  <>  0  then

WScript.Echo  “Join  failed  with  error:  ”  &  rc else

WScript.Echo  “Successfully  joined  ”  &  strComputer  &  ”  to  ”  &  strDomain end  if

Aşağıdaki script’i kullanarak ağda tespit edilen domain’ler hakkında bilgi toplayabilirsiniz.

On Error Resume Next

strComputer = “.”

Set objWMIService = GetObject(“winmgmts:” _

    & “{impersonationLevel=impersonate}!\\” & strComputer & “\root\cimv2″)

Set colItems = objWMIService.ExecQuery(“Select * from Win32_NTDomain”)

For Each objItem in colItems

    Wscript.Echo “Client Site Name: ” & objItem.ClientSiteName

    Wscript.Echo “DC Site Name: ” & objItem.DcSiteName

    Wscript.Echo “Description: ” & objItem.Description

    Wscript.Echo “DNS Forest Name: ” & objItem.DnsForestName

    Wscript.Echo “Domain Controller Address: ” & _

        objItem.DomainControllerAddress

    Wscript.Echo “Domain Controller Address Type: ” & _

        objItem.DomainControllerAddressType

    Wscript.Echo “Domain Controller Name: ” & objItem.DomainControllerName

    Wscript.Echo “Domain GUID: ” & objItem.DomainGuid

    Wscript.Echo “Domain Name: ” & objItem.DomainName

    Wscript.Echo “DS Directory Service Flag: ” & objItem.DSDirectoryServiceFlag

    Wscript.Echo “DS DNS Controller Flag: ” & objItem.DSDnsControllerFlag

    Wscript.Echo “DS DNS Domain Flag: ” & objItem.DSDnsDomainFlag

    Wscript.Echo “DS DNS Forest Flag: ” & objItem.DSDnsForestFlag

    Wscript.Echo “DS Global Catalog Flag: ” & objItem.DSGlobalCatalogFlag

    Wscript.Echo “DS Kerberos Distribution Center Flag: ” & _

        objItem.DSKerberosDistributionCenterFlag

    Wscript.Echo “DS Primary Domain Controller Flag: ” & _

        objItem.DSPrimaryDomainControllerFlag

    Wscript.Echo “DS Time Service Flag: ” & objItem.DSTimeServiceFlag

    Wscript.Echo “DS Writable Flag: ” & objItem.DSWritableFlag

    Wscript.Echo “Name: ” & objItem.Name

    Wscript.Echo “Primary Owner Contact: ” & objItem.PrimaryOwnerContact

    Wscript.Echo

Next

Active Directory üzerinde bilgisayar hesabı silmek için aşağıdaki script’i kullanabilirsiniz.

strComputer = “atl-pro-040″

set objComputer = GetObject(“LDAP://CN=” & strComputer & _

    “,CN=Computers,DC=fabrikam,DC=com”)

objComputer.DeleteObject (0)

ilkdc-dc01 örnek isimli DC üzerinde Global Catalog hizmetini devre dışı bırakır.

strComputer = “ilkdc-dc01″

Const NTDSDSA_OPT_IS_GC = 1

 Set objRootDSE = GetObject(“LDAP://” & strComputer & “/rootDSE”)

strDsServiceDN = objRootDSE.Get(“dsServiceName”)

Set objDsRoot  = GetObject _

    (“LDAP://” & strComputer & “/” & strDsServiceDN)

intOptions = objDsRoot.Get(“options”)

If intOptions And NTDSDSA_OPT_IS_GC Then

    objDsRoot.Put “options”, intOptions Xor NTDSDSA_OPT_IS_GC

    objDsRoot.Setinfo

End I

Gokhan.com Active Directory etki alanı içerisindeki Devre Dışı (Disabled) kullanıcı hesaplarını listeler.

Const ADS_UF_ACCOUNTDISABLE = 2

Set objConnection = CreateObject(“ADODB.Connection”)

objConnection.Open “Provider=ADsDSOObject;”

Set objCommand = CreateObject(“ADODB.Command”)

objCommand.ActiveConnection = objConnection

objCommand.CommandText = _

    “<GC://dc=gokhan,dc=com>;(objectCategory=User)” & _

        “;userAccountControl,distinguishedName;subtree” 

Set objRecordSet = objCommand.Execute

intCounter = 0

Do Until objRecordset.EOF

    intUAC=objRecordset.Fields(“userAccountControl”)

    If intUAC AND ADS_UF_ACCOUNTDISABLE Then

        WScript.echo objRecordset.Fields(“distinguishedName”) & ” is disabled”

        intCounter = intCounter + 1

    End If

    objRecordset.MoveNext

Loop

WScript.Echo VbCrLf & “A total of ” & intCounter & ” accounts are disabled.”

objConnection.Close

Gokhan.com Active Directory etki alanı içerisindeki Bilisimgunlugu OU’su içerisindeki Senyuz kullanıcısının etkin ya da devre dışı olup olmadığını listeler.

Set objUser = GetObject _

  (“LDAP://cn=senyuz,ou=Bilisimgunlugu,dc=gokhan,dc=com”)

If objUser.AccountDisabled = FALSE Then

      WScript.Echo “The account is enabled.”

Else

      WScript.Echo “The account is disabled.”

End If