Icacls 在windows目录文件授权中的应用

前言

最近因工作需要，需要对批量服务器某一目录下的文件进行统一授权，对于linux来说，授权很方便，对于window来说，要对目录下的文件进行批量授权还是很不方便的，windows平台授权自然想到用icacls或cacls工具来完成任务，且灵活。

需求

用vbs脚本完成授权工作，以便远程调用批量执行

能指定授权目录

能指定授权方式，即只对目录授权还是对目录文件统一授权

若对文件授权，需递归遍历指定目录，对子目录文件也授权

指定授权用户

指定授予用户权限(如:RX,W,F)

实现

基于以上需求，写了如下vbs脚本

If WScript.Arguments.Count = 0 then
WScript.Echo "Usage: do_auth.vbs [-d|-f] [FilePath] [AuthUser]"
WScript.Quit(1)
end if
Set WshShell = CreateObject("WScript.Shell")
Set objFSO = CreateObject("Scripting.FileSystemObject")
objAuthOption=WScript.Arguments(0)
objStartFolder = WScript.Arguments(1)
objAuthUser = WScript.Arguments(2)
Set objFolder = objFSO.GetFolder(objStartFolder)

ShowSubfolders objFSO.GetFolder(objStartFolder)

Sub ShowSubFolders(Folder)

'Wscript.Echo Subfolder.Path
If objAuthOption = "-f" Then
Set curFiles = objFSO.GetFolder(Folder.Path).Files
For Each curFile in curFiles
intRunError = WshShell.Run("icacls " & curFile.Path & " /grant " & chr("34") & objAuthUser & chr("34") & ":F ", 2, True)

If intRunError <> 0 Then
Wscript.Echo "Error assigning permissions for user " & objAuthUser & " to file " & curFile.Name
Else
Wscript.Echo "Success: file " & curFile.Name & " assigned user " & objAuthUser
End If
Next
For Each Subfolder in Folder.SubFolders
Set objFolder = objFSO.GetFolder(Subfolder.Path)
Set colFiles = objFolder.Files
For Each objFile in colFiles
intRunError = WshShell.Run("icacls " & objFile.Path & " /grant " & chr("34") & objAuthUser & chr("34") & ":F ", 2, True)

If intRunError <> 0 Then
Wscript.Echo "Error assigning permissions for user " & objAuthUser & " to file " & objFile.Name
Else
Wscript.Echo "Success: file " & objFile.Name & " assigned user " & objAuthUser
End If
Next
ShowSubFolders Subfolder
Next

ElseIf objAuthOption = "-d" Then
For Each Subfolder in Folder.SubFolders
intRunError = WshShell.Run("icacls " & Subfolder.Path & " /grant " & chr("34") & objAuthUser & chr("34") & ":F ", 2, True)

If intRunError <> 0 Then
Wscript.Echo "Error assigning permissions for user " & objAuthUser & " to folder " & Subfolder.Path
Else
Wscript.Echo "Success: folder " & Subfolder.Path & " assigned user " & objAuthUser
End If
ShowSubFolders Subfolder
Next
Else
WScript.Echo "Parameter error"
WScript.Quit(1)
End If
End Sub

总结

上述代码实现了文件中所列的需求，希望能帮助到大家