求一个可以控制共享文件夹权限的脚本，是share permissions，不是安全选项里的那个权限

2009-08-18 01:05:47 261 阅读 AI 写同款 · GEO 优化AI 选题数据监测一键分发 ›

Windows局域网共享文件夹权限与安全配置实战指南访问控制是计算机安全的核心机制之一，它通过定义用户对系统资源的访问权限来确保数据安全。其基本原理是基于身份验证和授权，通过用户账户、组策略和权限列表等技术手段实现。在局域网环境中，这一技术价值尤为突出，能有效防止未授权访问和数据泄露，保障内网数据流转的安全与秩序。Windows操作系统内置的SMB协议和NTFS文件系统提供了完整的访问控制框架，广泛应用于企业文件共享、团队协作和家庭网络存储等场景。本文聚焦于Windows共享文件夹的实战配置，深入解析共享权限与NTFS权限的双重检查机制，并融入BitLock 阅读详情

我想运行一个脚本，创建一个共享文件夹，并且设置这个文件夹的权限

就是右键单击，属性－共享－权限（permissions）那个按钮点一下，会弹出用户组对话框，可以添加用户等等

不是设置【安全】选项卡里那个权限

请问怎么用脚本实现，cmd命令也可以，只要vbs能运行就可以了，谢谢

...全文

局域网共享文件夹权限管理实战：从零构建安全访问体系本文详细介绍了局域网共享文件夹权限管理的实战方法，从零构建安全访问体系。通过创建专属用户账号、配置共享权限和NTFS安全权限，确保数据安全、操作可控和责任追溯。文章还提供了多权限级别实战案例和高频问题解决方案，帮助企业有效管理敏感数据，防止误操作和数据泄露。阅读详情

Pig23

vbScript 4,008 成员 3,512 内容

+ 关注 + 加入社区

切换为时间正序

sargentti 2010-10-19

打赏
举报

可用net share命令，如：
net share test=d:\test /GRANT:ad_name\test,FULL
其中/GRANT后就可以设置permission了。

fenyao 2009-08-18

打赏
举报

关注

Pig23 2009-08-18

打赏
举报

怎么老是报这句有错啊
set account = getObject("Winmgmts:{impersonationlevel=impersonate}!root/cimv2:Win32_Account.Name='" & strName & "',Domain='" & strDomain &"'")

我所在域是ap.at.local
域里一成员是 C, Jn(scj@ap.at.local)显示为这个
我想添加这个账户怎么搞

hookee 2009-08-18

打赏
举报





Const FILE_SHARE = 0

Const MAXIMUM_CONNECTIONS = 15

Const strDomain = "xxx" 'computer name

Const PERM_READ = 1179817

Const PERM_MODIFY = 1245631

Const PERM_FULL = 2032127





Dim strComputer

Dim objWMIService

Dim objNewShare



strComputer = "."



Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")

Set objNewShare = objWMIService.Get("Win32_Share")



'Worked Example

Call sharesec("C:\abc", "SharNmae", "description", "Users", PERM_FULL, PERM_MODIFY)



Sub sharesec(Fname, shr, info, account, Share_Perm, NTFS_Perm)

    Dim FSO

    Dim Services

    Dim SecDescClass

    Dim SecDesc

    Dim Trustee

    Dim ACE

    Dim Share

    Dim InParam

    Dim Network

    Dim FolderName

    Dim AdminServer

    Dim ShareName

    Dim FolderSecurity

    Dim RetVal

    Dim SecurityDescriptor

    Dim User

    

    FolderName = Fname

    AdminServer = "\\" & strComputer

    ShareName = shr

    'Write New security descriptor for the FolderName

    Set Services =GetObject("WINMGMTS:{impersonationLevel=impersonate,(Security)}!" & AdminServer & "\ROOT\CIMV2")

    Set SecurityDescriptor = Services.Get("Win32_SecurityDescriptor")

    

    Set FolderSecurity = GetObject("winmgmts:Win32_LogicalFileSecuritySetting.Path='" & FolderName & "'")



    RetVal = FolderSecurity.GetSecurityDescriptor(SecurityDescriptor)

    

    Set Trustee = SetGroupTrustee(strDomain, account)

    'Use SetGroupTrustee for  groups and SetAccountTrustee for users

    Set ACE = Services.Get("Win32_Ace").SpawnInstance_

    ACE.Properties_.Item("AccessMask") = NTFS_Perm

    ACE.Properties_.Item("AceFlags") = 3

    ACE.Properties_.Item("AceType") = 0

    ACE.Properties_.Item("Trustee") = Trustee

    SecurityDescriptor.Properties_.Item("DACL") = Array(ACE)

    

    RetVal = FolderSecurity.SetSecurityDescriptor(SecurityDescriptor)

    'Create new Share

  

    Set Services = GetObject("WINMGMTS:{impersonationLevel=impersonate,(Security)}!" & AdminServer & "\ROOT\CIMV2")

    Set SecDescClass = Services.Get("Win32_SecurityDescriptor")

    Set SecDesc = SecDescClass.SpawnInstance_()

    

    Set Trustee = SetGroupTrustee(strDomain, account)

    'Use SetGroupTrustee for groups and SetAccountTrustee for users

    Set ACE = Services.Get("Win32_Ace").SpawnInstance_

    ACE.Properties_.Item("AccessMask") = Share_Perm

    ACE.Properties_.Item("AceFlags") = 3

    ACE.Properties_.Item("AceType") = 0

    ACE.Properties_.Item("Trustee") = Trustee

    SecDesc.Properties_.Item("DACL") = Array(ACE)

    Set Share = Services.Get("Win32_Share")

    Set InParam = Share.Methods_("Create").InParameters.SpawnInstance_()

    InParam.Properties_.Item("Access") = SecDesc

    InParam.Properties_.Item("Description") = Info

    InParam.Properties_.Item("Name") = ShareName

    InParam.Properties_.Item("Path") = FolderName

    InParam.Properties_.Item("MaximumAllowed") = MAXIMUM_CONNECTIONS

    InParam.Properties_.Item("Type") = 0

    Share.ExecMethod_ "Create", InParam

End Sub





Function SetAccountTrustee(strDomain, strName)

    Dim objTrustee

    Dim account

    Dim accountSID

    set objTrustee = getObject("Winmgmts:{impersonationlevel=impersonate}!root/cimv2:Win32_Trustee").Spawninstance_

    set account =  getObject("Winmgmts:{impersonationlevel=impersonate}!root/cimv2:Win32_Account.Name='" & strName & "',Domain='" & strDomain &"'")

    set accountSID = getObject("Winmgmts:{impersonationlevel=impersonate}!root/cimv2:Win32_SID.SID='" & account.SID &"'")

    objTrustee.Domain = strDomain

    objTrustee.Name = strName

    objTrustee.Properties_.item("SID") = accountSID.BinaryRepresentation

    set accountSID = nothing

    set account = nothing

    set SetAccountTrustee = objTrustee

End Function





Function SetGroupTrustee(strDomain, strName)

    Dim objTrustee

    Dim account

    Dim accountSID

    set objTrustee = getObject("Winmgmts:{impersonationlevel=impersonate}!root/cimv2:Win32_Trustee").Spawninstance_

    Set account = getObject("Winmgmts:{impersonationlevel=impersonate}!root/cimv2:Win32_Group.Name='" & strName & "',Domain='" & strDomain &"'")

    Set accountSID = getObject("Winmgmts:{impersonationlevel=impersonate}!root/cimv2:Win32_SID.SID='" & account.SID &"'")

    objTrustee.Domain = strDomain

    objTrustee.Name = strName

    objTrustee.Properties_.item("SID") = accountSID.BinaryRepresentation

    set accountSID = nothing

    set account = nothing

    set SetGroupTrustee = objTrustee

End Function

求一个可以控制共享文件夹权限的脚本，是share permissions，不是安全选项里的那个权限

相关推荐