VBScript | Think Tank Blog

Security Identifier, SID, ist ein eindeutiger Sicherheits-Identifikator, den Microsoft Windows automatisch vergibt, um jedes System, jeden Benutzer und jede Gruppe dauerhaft zu identifizieren.

Mit dem VBScript GetSID.vbs lassen sich die SID von Windows ausgeben.


'Description: Zeigt alle Benutzerkonten und SID
'Created on : Apr 5, 2010
'Prerequisite: Windows

Set WshShell = CreateObject("Wscript.Shell")
Set fso = Wscript.CreateObject("Scripting.FilesystemObject")
fName = WshShell.SpecialFolders("Desktop") &amp; "\GetSID.txt"
Set b = fso.CreateTextFile(fName, true)
b.writeblanklines 1
b.writeline string(61,"*")
b.writeline "Benutzerkonten mit SIDs und Profile-Pfade."
b.WriteLine "GetSID.vbs - 2010 by Don Metteo"
b.WriteLine "https://think.unblog.ch"
b.writeline string(61,"*")
b.writeblanklines 1

strProfileBranch = "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\"
strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" &amp; strComputer &amp; "\root\cimv2")
Set colAccounts = objWMIService.ExecQuery _
 ("Select * From Win32_UserAccount")

For Each objAccount in colAccounts
 If objAccount.Name = "HelpAssistant" or objAccount.Name = "SUPPORT_388945a0" then
 else
 b.writeline "Username : " &amp; objAccount.Name
 b.writeline "SID : " &amp; objAccount.SID
 b.writeline "Profile Path : " &amp; GetHomePath(objAccount.SID)
 b.writeblanklines 1
 end if
Next

Function GetHomePath(strSID)
 On Error Resume Next
 GetHomePath = WshShell.ExpandEnvironmentStrings(Trim(WshShell.RegRead (strProfileBranch &amp; strSID &amp; "\ProfileImagePath")))
 On Error Goto 0
End Function

b.writeline string(61,"*")
b.close
WshShell.Run "notepad.exe " &amp; fName

Set fso = Nothing
set Wshshell = Nothing

'Description: Zeigt alle Benutzerkonten und SID

'Created on : Apr 5, 2010

'Prerequisite: Windows

Set WshShell = CreateObject("Wscript.Shell")

Set fso = Wscript.CreateObject("Scripting.FilesystemObject")

fName = WshShell.SpecialFolders("Desktop") & "\GetSID.txt"

Set b = fso.CreateTextFile(fName, true)

b.writeblanklines 1

b.writeline string(61,"*")

b.writeline "Benutzerkonten mit SIDs und Profile-Pfade."

b.WriteLine "GetSID.vbs - 2010 by Don Metteo"

b.WriteLine "https://think.unblog.ch"

b.writeline string(61,"*")

b.writeblanklines 1

strProfileBranch = "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\"

strComputer = "."

Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")

Set colAccounts = objWMIService.ExecQuery _

("Select * From Win32_UserAccount")

For Each objAccount in colAccounts

If objAccount.Name = "HelpAssistant" or objAccount.Name = "SUPPORT_388945a0" then

else

b.writeline "Username : " & objAccount.Name

b.writeline "SID : " & objAccount.SID

b.writeline "Profile Path : " & GetHomePath(objAccount.SID)

b.writeblanklines 1

end if

Function GetHomePath(strSID)

On Error Resume Next

GetHomePath = WshShell.ExpandEnvironmentStrings(Trim(WshShell.RegRead (strProfileBranch & strSID & "\ProfileImagePath")))

On Error Goto 0

End Function

b.writeline string(61,"*")

b.close

WshShell.Run "notepad.exe " & fName

Set fso = Nothing

set Wshshell = Nothing

Nach dem Ausführen des Scriptes werden die SID im Notepad geöffnet.

Mit dem VBScript whoami.vbs wird die aktuelle IP-Adresse, der Computer und der Benutzername unter Windows ausgegeben.


' VBScript Source File Created for any
' NAME: whoami.vbs

Const HKCR = &amp;H80000000
Const HKCU = &amp;H80000001
Const HKLM = &amp;H80000002
Const HKU = &amp;H80000003

Set fs = CreateObject("Scripting.FileSystemObject")

'**********************************
'ComputerName aus Registry auslesen
'**********************************

s_Key = "SYSTEM\CurrentControlSet\Control\ComputerName\ActiveComputerName"

s_Wert = "ComputerName"
Set wmireg = GetObject("winmgmts:root\default:StdRegProv")

result = wmireg.GetStringValue(HKLM, s_Key, s_Wert, s_ComputerName)

'**********************************
'UserName aus Registry auslesen
'**********************************

s_Key = "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"

s_Wert = "DefaultUserName"
Set wmireg = GetObject("winmgmts:root\default:StdRegProv")

result = wmireg.GetStringValue(HKLM, s_Key, s_Wert, s_UserName)

'*****************************************
'IPConfig Daten auslesen und echo ausgeben
'*****************************************

strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
    &amp; "{impersonationLevel=impersonate}!\\" &amp; strComputer &amp; "\root\cimv2")

Set IPConfigSet = objWMIService.ExecQuery _
    ("Select * from Win32_NetworkAdapterConfiguration Where IPEnabled=TRUE")

Set colAdapters = objWMIService.ExecQuery _
    ("SELECT * FROM Win32_NetworkAdapterConfiguration WHERE IPEnabled = True")

For Each IPConfig in IPConfigSet
   If Not IsNull(IPConfig.IPAddress) Then
      For i=LBound(IPConfig.IPAddress) to UBound(IPConfig.IPAddress)
      ausgabe = Wscript.Echo ("IP Address " &amp; IPConfig.IPAddress(i) &amp; vbCrLf &amp; "Computer " &amp; s_ComputerName &amp; vbCrLf &amp; "Username " &amp; s_UserName)
      Next
   End If
Next

' VBScript Source File Created for any

' NAME: whoami.vbs

Const HKCR = &H80000000

Const HKCU = &H80000001

Const HKLM = &H80000002

Const HKU = &H80000003

Set fs = CreateObject("Scripting.FileSystemObject")

'**********************************

'ComputerName aus Registry auslesen

'**********************************

s_Key = "SYSTEM\CurrentControlSet\Control\ComputerName\ActiveComputerName"

s_Wert = "ComputerName"

Set wmireg = GetObject("winmgmts:root\default:StdRegProv")

result = wmireg.GetStringValue(HKLM, s_Key, s_Wert, s_ComputerName)

'**********************************

'UserName aus Registry auslesen

'**********************************

s_Key = "SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"

s_Wert = "DefaultUserName"

Set wmireg = GetObject("winmgmts:root\default:StdRegProv")

result = wmireg.GetStringValue(HKLM, s_Key, s_Wert, s_UserName)

'*****************************************

'IPConfig Daten auslesen und echo ausgeben

'*****************************************

strComputer = "."

Set objWMIService = GetObject("winmgmts:" _

& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")

Set IPConfigSet = objWMIService.ExecQuery _

("Select * from Win32_NetworkAdapterConfiguration Where IPEnabled=TRUE")

Set colAdapters = objWMIService.ExecQuery _

("SELECT * FROM Win32_NetworkAdapterConfiguration WHERE IPEnabled = True")

For Each IPConfig in IPConfigSet

If Not IsNull(IPConfig.IPAddress) Then

For i=LBound(IPConfig.IPAddress) to UBound(IPConfig.IPAddress)

ausgabe = Wscript.Echo ("IP Address " & IPConfig.IPAddress(i) & vbCrLf & "Computer " & s_ComputerName & vbCrLf & "Username " & s_UserName)

End If