求一个可以控制共享文件夹权限的脚本，是share permissions，不是安全选项里的那个权限

[Pig23]

我想运行一个脚本，创建一个共享文件夹，并且设置这个文件夹的权限

就是右键单击，属性－共享－权限（permissions）那个按钮点一下，会弹出用户组对话框，可以添加用户等等

不是设置【安全】选项卡里那个权限

请问怎么用脚本实现，cmd命令也可以，只要vbs能运行就可以了，谢谢

[hookee]

Const FILE_SHARE = 0
Const MAXIMUM_CONNECTIONS = 15
Const strDomain = "xxx" 'computer name
Const PERM_READ = 1179817
Const PERM_MODIFY = 1245631
Const PERM_FULL = 2032127


Dim strComputer
Dim objWMIService
Dim objNewShare

strComputer = "."

Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
Set objNewShare = objWMIService.Get("Win32_Share")

'Worked Example
Call sharesec("C:\abc", "SharNmae", "description", "Users", PERM_FULL, PERM_MODIFY)

Sub sharesec(Fname, shr, info, account, Share_Perm, NTFS_Perm)
    Dim FSO
    Dim Services
    Dim SecDescClass
    Dim SecDesc
    Dim Trustee
    Dim ACE
    Dim Share
    Dim InParam
    Dim Network
    Dim FolderName
    Dim AdminServer
    Dim ShareName
    Dim FolderSecurity
    Dim RetVal
    Dim SecurityDescriptor
    Dim User
    
    FolderName = Fname
    AdminServer = "\\" & strComputer
    ShareName = shr
    'Write New security descriptor for the FolderName
    Set Services =GetObject("WINMGMTS:{impersonationLevel=impersonate,(Security)}!" & AdminServer & "\ROOT\CIMV2")
    Set SecurityDescriptor = Services.Get("Win32_SecurityDescriptor")
    
    Set FolderSecurity = GetObject("winmgmts:Win32_LogicalFileSecuritySetting.Path='" & FolderName & "'")

    RetVal = FolderSecurity.GetSecurityDescriptor(SecurityDescriptor)
    
    Set Trustee = SetGroupTrustee(strDomain, account)
    'Use SetGroupTrustee for  groups and SetAccountTrustee for users
    Set ACE = Services.Get("Win32_Ace").SpawnInstance_
    ACE.Properties_.Item("AccessMask") = NTFS_Perm
    ACE.Properties_.Item("AceFlags") = 3
    ACE.Properties_.Item("AceType") = 0
    ACE.Properties_.Item("Trustee") = Trustee
    SecurityDescriptor.Properties_.Item("DACL") = Array(ACE)
    
    RetVal = FolderSecurity.SetSecurityDescriptor(SecurityDescriptor)
    'Create new Share
  
    Set Services = GetObject("WINMGMTS:{impersonationLevel=impersonate,(Security)}!" & AdminServer & "\ROOT\CIMV2")
    Set SecDescClass = Services.Get("Win32_SecurityDescriptor")
    Set SecDesc = SecDescClass.SpawnInstance_()
    
    Set Trustee = SetGroupTrustee(strDomain, account)
    'Use SetGroupTrustee for groups and SetAccountTrustee for users
    Set ACE = Services.Get("Win32_Ace").SpawnInstance_
    ACE.Properties_.Item("AccessMask") = Share_Perm
    ACE.Properties_.Item("AceFlags") = 3
    ACE.Properties_.Item("AceType") = 0
    ACE.Properties_.Item("Trustee") = Trustee
    SecDesc.Properties_.Item("DACL") = Array(ACE)
    Set Share = Services.Get("Win32_Share")
    Set InParam = Share.Methods_("Create").InParameters.SpawnInstance_()
    InParam.Properties_.Item("Access") = SecDesc
    InParam.Properties_.Item("Description") = Info
    InParam.Properties_.Item("Name") = ShareName
    InParam.Properties_.Item("Path") = FolderName
    InParam.Properties_.Item("MaximumAllowed") = MAXIMUM_CONNECTIONS
    InParam.Properties_.Item("Type") = 0
    Share.ExecMethod_ "Create", InParam
End Sub


Function SetAccountTrustee(strDomain, strName)
    Dim objTrustee
    Dim account
    Dim accountSID
    set objTrustee = getObject("Winmgmts:{impersonationlevel=impersonate}!root/cimv2:Win32_Trustee").Spawninstance_
    set account =  getObject("Winmgmts:{impersonationlevel=impersonate}!root/cimv2:Win32_Account.Name='" & strName & "',Domain='" & strDomain &"'")
    set accountSID = getObject("Winmgmts:{impersonationlevel=impersonate}!root/cimv2:Win32_SID.SID='" & account.SID &"'")
    objTrustee.Domain = strDomain
    objTrustee.Name = strName
    objTrustee.Properties_.item("SID") = accountSID.BinaryRepresentation
    set accountSID = nothing
    set account = nothing
    set SetAccountTrustee = objTrustee
End Function


Function SetGroupTrustee(strDomain, strName)
    Dim objTrustee
    Dim account
    Dim accountSID
    set objTrustee = getObject("Winmgmts:{impersonationlevel=impersonate}!root/cimv2:Win32_Trustee").Spawninstance_
    Set account = getObject("Winmgmts:{impersonationlevel=impersonate}!root/cimv2:Win32_Group.Name='" & strName & "',Domain='" & strDomain &"'")
    Set accountSID = getObject("Winmgmts:{impersonationlevel=impersonate}!root/cimv2:Win32_SID.SID='" & account.SID &"'")
    objTrustee.Domain = strDomain
    objTrustee.Name = strName
    objTrustee.Properties_.item("SID") = accountSID.BinaryRepresentation
    set accountSID = nothing
    set account = nothing
    set SetGroupTrustee = objTrustee
End Function

[Pig23]

怎么老是报这句有错啊
set account = getObject("Winmgmts:{impersonationlevel=impersonate}!root/cimv2:Win32_Account.Name='" & strName & "',Domain='" & strDomain &"'")


我所在域是ap.at.local
域里一成员是 C, Jn([e-mail])显示为这个
我想添加这个账户怎么搞

[fenyao]

关注

[sargentti]

可用net share命令，如：
net share test=d:\test /GRANT:ad_name\test,FULL
其中/GRANT后就可以设置permission了。