|
REM ============================================
REM =CREATES ALL USER ACCOUNTS FOR BIZTALK 2006=
REM ============================================
REM = Neil Thompson
REM = June 2006
REM = n.thompson@cgi.com
REM ============================================
REM = THIS SCRIPT IS SUPPLIED "AS-IS" WITHOUT WARRANTY
REM = OF ANY KIND.
REM = USE THIS FILE AT YOUR OWN RISK. NEITHER CGI
REM = NOR NEIL THOMPSON ENSURE THAT THIS SCRIPT WILL
REM = WORK AS DESCRIBED NOR THAT IT IS SAFE TO RUN
REM = IN YOUR ENVIRONMENT. BY RUNNING THIS SCRIPT
REM = YOU AND YOU ALONE ASSUME RESPONSIBILITY FOR
REM = ANY AND ALL OUTCOMES
REM ============================================
REM == GLOBAL VARIABLES/CONSTANTS==
REM == CHANGE THESE VALUES TO REFLECT YOUR OWN ENVIRONMENT!!
strOU = "ou=BizTalk,ou=service accounts, dc=MYDOMAIN, dc=lab"
strDefaultPWD = "P@ssw0rd"
strDomainName = "MYDOMAIN.COM"
strAdministrator = "cn=administrator,cn=users,dc=MYDOMAIN, dc=lab"
REM ==CREATE ALL GROUPS (ASSUMES NONE EXIST ALREADY)
CreateGroup "SSO Administrator(s)",strOU
CreateGroup "SSO Affiliate Administrators",strOU
CreateGroup "BizTalk Server Administrators",strOU
CreateGroup "BizTalk Server Operators",strOU
CreateGroup "BizTalk Application Users",strOU
CreateGroup "BizTalk Isolated Host Users",strOU
CreateGroup "EDI Subsystem Users",strOU
CreateGroup "BizTalk BAM Portal Users",strOU
CreateGroup "BizTalk Sharepoint Adapter Enabled Hosts",strOU
CreateGroup "BizTalk BAS Web Services",strOU
CreateGroup "BizTalk BAS Users",strOU
CreateGroup "BizTalk BAS Managers",strOU
CreateGroup "BizTalk BAS Administrators",strOU
REM ==CREATE ALL USERS(ASSUMES NONE EXIST ALREADY)
CreateUser "svcSSO",strDefaultPWD, strOU
CreateUser "svcInstanceHost",strDefaultPWD, strOU
CreateUser "svcIsoInstanceHost",strDefaultPWD, strOU
CreateUser "svcReu",strDefaultPWD, strOU
CreateUser "svcEDI",strDefaultPWD, strOU
CreateUser "svcHWS",strDefaultPWD, strOU
CreateUser "svcHWSWeb",strDefaultPWD, strOU
CreateUser "svcBamNotification",strDefaultPWD, strOU
CreateUser "svcBamManWS",strDefaultPWD, strOU
CreateUser "svcBamAppPool",strDefaultPWD, strOU
CreateUser "svcBasOwner",strDefaultPWD, strOU
CreateUser "svcBasManWS",strDefaultPWD, strOU
CreateUser "svcBasPubWS",strDefaultPWD, strOU
CreateUser "svcBasAppPool",strDefaultPWD, strOU
AddUsersToGroups
'REM NOTIFY USERS OF COMPLETION
Msgbox("Created Groups and Accounts")
Sub CreateUser(UserName,Password,OU)
Set objOU = GetObject("LDAP://" & OU)
Set objUser = objOU.Create("User","cn=" & UserName)
objUser.Put "SAMAccountName","" & UserName & ""
objUser.Put "userPrincipalName","" & UserName & "@" & strDomainName
objUser.Put "name","BizTalk Service Account" & UserName & ""
objUser.Put "displayName","BizTalk Service Account" & UserName & ""
objUser.AccountExpirationDate = "01/01/1970"
objUser.SetInfo
objUser.AccountDisabled = FALSE
REM Const ADS_UF_DONT_EXPIRE_PASSWD = &H10000
REM objUser.Put "userAccountControl", ADS_UF_DONT_EXPIRE_PASSWD
objUser.SetPassword Password
objUser.SetInfo
End Sub
Sub CreateGroup(GroupName,OU)
Set objOU = GetObject("LDAP://" & OU)
Set objGroup = objOU.Create("Group","cn=" & GroupName)
objGroup.Put "sAMAccountName", "" & GroupName & ""
objGroup.SetInfo
End Sub
Sub AddUsersToGroups
REM === SSO Administrator(s) ===
Set objGroup = GetObject("LDAP://cn=SSO Administrator(s)," & strOU)
objGroup.PutEx 3,"member", Array("cn=svcSSO," & strOU,strAdministrator)
objGroup.SetInfo
REM === SSO Affiliate Administrators ===
Set objGroup = GetObject("LDAP://cn=SSO Affiliate Administrators," & strOU)
objGroup.PutEx 3,"member", Array(strAdministrator )
objGroup.SetInfo
REM === BizTalk Server Administrators ===
Set objGroup = GetObject("LDAP://cn=BizTalk Server Administrators," & strOU)
objGroup.PutEx 3,"member", Array(strAdministrator,"cn=svcBasManWS," & strOU )
objGroup.SetInfo
REM === BizTalk Server Operators ===
Set objGroup = GetObject("LDAP://cn=BizTalk Server Operators," & strOU)
objGroup.PutEx 3,"member", Array(strAdministrator)
objGroup.SetInfo
REM === BizTalk Application Users ===
Set objGroup = GetObject("LDAP://cn=BizTalk Application Users," & strOU)
objGroup.PutEx 3,"member", Array("cn=svcInstanceHost," & strOU)
objGroup.SetInfo
REM === BizTalk Isolated Host Users ===
Set objGroup = GetObject("LDAP://cn=BizTalk Isolated Host Users," & strOU)
objGroup.PutEx 3,"member", Array("cn=svcIsoInstanceHost," & strOU,"cn=svcHWSWeb," & strOU)
objGroup.SetInfo
REM === EDI Subsystem Users ===
Set objGroup = GetObject("LDAP://cn=EDI Subsystem Users," & strOU)
objGroup.PutEx 3,"member", Array("cn=svcEDI," & strOU)
objGroup.SetInfo
REM === BizTalk BAM Portal Users ===
REM === BizTalk BAS Web Services ===
Set objGroup = GetObject("LDAP://cn=BizTalk BAS Web Services," & strOU)
objGroup.PutEx 3,"member", Array("cn=svcBasManWS," & strOU,"cn=svcBasPubWS," & strOU,"cn=svcBasAppPool," & strOU)
objGroup.SetInfo
REM === BizTalk BAM Portal Users ===
REM === BizTalk BAS Managers ===
REM === BizTalk BAS Administrators ===
Set objGroup = GetObject("LDAP://cn=BizTalk BAS Administrators," & strOU)
objGroup.PutEx 3,"member", Array("cn=svcBasOwner," & strOU)
objGroup.SetInfo
REM === BizTalk Sharepoint Adapter Enabled Hosts ===
Set objGroup = GetObject("LDAP://cn=BizTalk Sharepoint Adapter Enabled Hosts," & strOU)
objGroup.PutEx 3,"member", Array("cn=svcInstanceHost," & strOU)
objGroup.SetInfo
End Sub |