脚本 服务相关.docx

脚本 服务相关更改服务帐户密码描述更改在假定的服务帐户 Netsvc 下运行的任何服务的服务帐户密码。脚本代码以下是代码片段：strComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=impersonate! & strComputer & rootcimv2)Set colServiceList = objWMIService.ExecQuery _(Select * from Win32_Service)For Each objservice in colServiceListIf objService.Startname = .netsvc ThenerrReturn = objService.Change( , , , , , , , password)End IfNext配置服务错误控制代码描述将所有的自动启动服务配置为在服务启动失败时发出警报。脚本代码以下是代码片段：Const NORMAL_ERROR_CONTROL = 2strComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=impersonate! & strComputer & rootcimv2)Set colServiceList = objWMIService.ExecQuery _(Select * from Win32_Service where ErrorControl = Ignore)For Each objService in colServiceListerrReturn = objService.Change( , , , NORMAL_ERROR_CONTROL)Next配置服务启动选项描述禁用所有配置为手动启动的服务。除了别的之外，这会使得 Power User 不能启动这些服务。脚本代码以下是代码片段：strComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=impersonate! & strComputer & rootcimv2)Set colServiceList = objWMIService.ExecQuery _(Select * from Win32_Service where StartMode = Manual)For Each objService in colServiceListerrReturnCode = objService.Change( , , , , Disabled)Next确定在某个进程中运行的服务描述返回在 Services.exe 进程中运行的服务的列表。脚本代码以下是代码片段：strComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=impersonate! & strComputer & rootcimv2)Set colListOfServices = objWMIService.ExecQuery _(Select * from Win32_Service)For Each objService in colListOfServicesIf objService.PathName = C:WINDOWSsystem32services.exe ThenWscript.Echo objService.DisplayNameEnd IfNext确定在所有进程中运行的服务描述返回进程列表以及当前在每个进程中运行的所有服务。脚本代码以下是代码片段：set objIdDictionary = CreateObject(Scripting.Dictionary)strComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=impersonate! & strComputer & rootcimv2)Set colServices = objWMIService.ExecQuery _(Select * from Win32_Service Where State Stopped)For Each objService in colServicesIf objIdDictionary.Exists(objService.ProcessID) ThenElseobjIdDictionary.Add objService.ProcessID, objService.ProcessIDEnd IfNextcolProcessIDs = objIdDictionary.ItemsFor i = 0 to objIdDictionary.Count - 1Set colServices = objWMIService.ExecQuery _(Select * from Win32_Service Where ProcessID = & _colProcessIDs(i) & )Wscript.Echo Process ID: & colProcessIDs(i)For Each objService in colServicesWscript.Echo VbTab & objService.DisplayNameNextNext确定可以暂停的服务描述返回可以暂停的服务的列表。脚本代码以下是代码片段：strComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=impersonate! & strComputer & rootcimv2)Set colServices = objWMIService.ExecQuery _(Select * from Win32_Service Where AcceptPause = True)For Each objService in colServicesWscript.Echo objService.DisplayNameNext确定可以停止的服务描述返回可以停止的服务的列表。脚本代码以下是代码片段：strComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=impersonate! & strComputer & rootcimv2)Set colServices = objWMIService.ExecQuery _(Select * from Win32_Service Where AcceptStop = True)For Each objService in colServicesWscript.Echo objService.DisplayNameNext枚举单个服务的前项服务描述枚举必须在启动 SMTP 服务之前运行的所有服务。脚本代码以下是代码片段：strComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=impersonate! & strComputer & rootcimv2)Set colServiceList = objWMIService.ExecQuery(Associators of _& Win32_service.Name=SMTPSVC Where _& AssocClass=Win32_DependentService & Role=Dependent)For Each objService in colServiceListWscript.Echo objService.DisplayNameNext枚举单个服务的依赖服务描述枚举不能在启动 Rasman 服务之前启动的所有服务。脚本代码以下是代码片段：strComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=impersonate! & strComputer & rootcimv2)Set colServiceList = objWMIService.ExecQuery(Associators of _& Win32_Service.Name=rasman Where _& AssocClass=Win32_DependentService & Role=Antecedent )For Each objService in colServiceListWscript.Echo objService.DisplayNameNext枚举所有服务的依赖服务描述枚举所有安装在计算机上的服务的依赖服务。脚本代码以下是代码片段：Const ForAppending = 8Set objFSO = CreateObject(Scripting.FileSystemObject)Set objLogFile = _objFSO.OpenTextFile(C:ScriptsService_Dependencies.csv, _ForAppending, True)objLogFile.Write(Service Dependencies)objLogFile.WriteLinestrComputer = .Set objWMIService = GetObject(winmgmts: & _impersonationLevel=Impersonate! & strComputer & rootcimv2)Set colServices = objWMIService.ExecQuery(Select * from Win32_Service)For Each objService in colServicesstrServiceRegistryName = objService.NamestrServiceDisplayName = objService.DisplayNameSet colDependentServices = objWMIService.ExecQuery(Associators of & _Win32_Service.Name= & strServiceRegistryName & & _Where AssocClass=Win32_DependentService Role=Antecedent)If colDependentServices.Count = 0 ThenobjLogFile.Write(strServiceDisplayName & ,None)objLogFile.WriteLineElseobjLogFile.Write(strServiceDisplayName & ,)For Each objDependentService in colDependentServicesobjLogFile.Write(objDependentService.DisplayName & ,)NextobjLogFile.WriteLineEnd IfNextobjLogFile.Close枚举非活动服务描述返回安装在计算机上目前已经停止的所有服务的列表。脚本代码以下是代码片段：strComputer = .Set objWMIService = GetObject(winmgmts: & _impersonationLevel=Impersonate! & strComputer & rootcimv2)Set colStoppedServices = objWMIService.ExecQuery _(SELECT DisplayName,State FROM Win32_Service WHERE State Running)For Each objService in colStoppedServicesWscript.Echo objService.DisplayName & = & objService.StateNext枚举服务加载顺序组描述返回计算机上的所有服务加载顺序组的列表以及它们的加载顺序。有关在这段代码中使用的 Win32_LoadOrderGroup 类别的更多信息，请单击此处。支持平台Windows Server 2003 是 Windows XP 是 Windows 2000 是 Windows NT 4.0 是，需要安装 WMI脚本代码以下是代码片段：On Error Resume NextstrComputer = .Set objWMIService = GetObject(winmgmts: & strComputer & rootcimv2)Set colItems = objWMIService.ExecQuery(Select * from Win32_LoadOrderGroup)For Each objItem in colItemsWscript.Echo Driver Enabled: & objItem.DriverEnabledWscript.Echo Group Order: & objItem.GroupOrderWscript.Echo Name: & objItem.NameWscript.EchoNext监视服务性能描述使用已格式化的性能计数器检索 DHCP Server 服务的性能数据。需要 Windows XP 或 Windows Server 2003。脚本代码以下是代码片段：strComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=impersonate! & strComputer & rootcimv2)set objRefresher = CreateObject(WbemScripting.SWbemRefresher)Set colDHCPServer = objRefresher.AddEnum _(objWMIService, win32_PerfFormattedData_DHCPServer_DHCPServer). _ObjectSetobjRefresher.RefreshFor i = 1 to 60For Each objDHCPServer in colDHCPServerWscript.Echo Acknowledgements per second: & _objDHCPServer.AcksPerSecWscript.Echo Declines per second: & _objDHCPServer.DeclinesPerSecWscript.Echo Discovers per second: & _objDHCPServer.DiscoversPerSecWscript.Echo Informs per second: & objDHCPServer.InformsPerSecWscript.Echo Offers per second: & objDHCPServer.OffersPerSecWscript.Echo Releases per second: & _objDHCPServer.ReleasesPerSecWscript.Echo Requests per second: & _objDHCPServer.RequestsPerSecNextWscript.Sleep 10000objRefresher.RefreshNext暂停在某个特定帐户下运行的服务描述暂停在假定的服务帐户 Netsvc 下运行的所有服务。脚本代码以下是代码片段：strComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=impersonate! & strComputer & rootcimv2)Set colServices = objWMIService.ExecQuery _(Select * from Win32_Service)For each objService in colServicesIf objService.StartName = .netsvc ThenerrReturnCode = objService.PauseService()End IfNext删除服务描述删除名为 DbService 的假定服务。脚本代码以下是代码片段：strComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=imper-sonate! & strComputer & rootcimv2)Set colListOfServices = objWMIService.ExecQuery _(Select * from Win32_Service Where Name = DbService)For Each objService in colListOfServicesobjService.StopService()objService.Delete()Next恢复暂停的自动启动服务描述重新启动已经暂停的任何自动启动服务。脚本代码以下是代码片段：strComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=impersonate! & strComputer & rootcimv2)Set colListOfServices = objWMIService.ExecQuery _(Select * from Win32_Service Where State = Paused and StartMode = Auto)For Each objService in colListOfServicesobjService.ResumeService()Next检索服务属性描述检索服务及其相关属性的完整列表。将信息保存到文本文件：C:ScriptsService_List.cs。脚本代码以下是代码片段：Const ForAppending = 8Set objFSO = CreateObject(Scripting.FileSystemObject)Set objLogFile = objFSO.OpenTextFile(c:scriptsservice_list.csv, _ForAppending, True)objLogFile.Write _(System Name,Service Name,Service Type,Service State, Exit _& Code,Process ID,Can Be Paused,Can Be Stopped,Caption, _& Description,Can Interact with Desktop,Display Name,Error _& Control, Executable Path Name,Service Started, _& Start Mode,Account Name )objLogFile.WritelinestrComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=impersonate! & strComputer & rootcimv2)Set colListOfServices = objWMIService.ExecQuery _(Select * from Win32_Service)For Each objService in colListOfServicesobjLogFile.Write(objService.SystemName) & ,objLogFile.Write(objService.Name) & ,objLogFile.Write(objService.ServiceType) & ,objLogFile.Write(objService.State) & ,objLogFile.Write(objService.ExitCode) & ,objLogFile.Write(objService.ProcessID) & ,objLogFile.Write(objService.AcceptPause) & ,objLogFile.Write(objService.AcceptStop) & ,objLogFile.Write(objService.Caption) & ,objLogFile.Write(objService.Description) & ,objLogFile.Write(objService.DesktopInteract) & ,objLogFile.Write(objService.DisplayName) & ,objLogFile.Write(objService.ErrorControl) & ,objLogFile.Write(objService.PathName) & ,objLogFile.Write(objService.Started) & ,objLogFile.Write(objService.StartMode) & ,objLogFile.Write(objService.StartName) & ,objLogFile.writelineNextobjLogFile.Close检索服务状态描述返回安装在计算机上的所有服务的列表，并且指示它们的当前状态(一般来说是正在运行还是没有运行)。脚本代码以下是代码片段：strComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=impersonate! & strComputer & rootcimv2)Set colRunningServices = objWMIService.ExecQuery _(Select * from Win32_Service)For Each objService in colRunningServicesWscript.Echo objService.DisplayName & VbTab & objService.StateNext从事件日志检索服务状态的改变描述从事件 ID 为 7036 的 System 事件日志中检索事件。任何时候只要状态发生改变就记录这些事件。需要 Windows XP 或 Windows Server 2003。脚本代码以下是代码片段：Set dtmConvertedDate = CreateObject(WbemScripting.SWbemDateTime)strComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=impersonate! & strComputer & rootcimv2)Set colServiceEvents = objWMIService.ExecQuery _(Select * from Win32_NTLogEvent Where Logfile = System and _& EventCode = 7036)For Each strEvent in colServiceEventsdtmConvertedDate.Value = strEvent.TimeWrittenWscript.Echo dtmConvertedDate.GetVarDateWscript.Echo strEvent.MessageNext启动服务及其依赖服务描述启动 NetDDE 服务及其所有的依赖服务。脚本代码以下是代码片段：strComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=impersonate! & strComputer & rootcimv2)Set colServiceList = objWMIService.ExecQuery _(Select * from Win32_Service where Name=NetDDE)For each objService in colServiceListerrReturn = objService.StartService()NextWscript.Sleep 20000Set colServiceList = objWMIService.ExecQuery(Associators of _& Win32_Service.Name=NetDDE Where _& AssocClass=Win32_DependentService & Role=Dependent )For each objService in colServiceListobjService.StartService()Next启动已经停止的自动启动服务描述重新启动任何已经停止的自动启动服务。脚本代码以下是代码片段：strComputer = .Set objWMIService = GetObject(winmgmts: _& impersonationLevel=impersonate! & strComputer & rootcimv2)Set colListOfServices = objWMIService.ExecQuery _(Select * from Win32_Service Where State = Stopped and StartMode = _& Auto)For Each objService in colListOfServicesobjService.StartService()Next停止服务及其依赖服务描述停止 NetDDE 服务及其所有的依赖服务。脚本代码以下是代码片段：strComputer = .Set objWMIService = GetObject(winmgmt