VB Script Problem

[networker31 10]

Hallo, ich möchte in folgendes Script:

 

strComputer = "."

Set objWMIService = GetObject("winmgmts:" _

& "{impersonationLevel=impersonate,(Backup)}!\\" & _

strComputer & "\root\cimv2")

 

Set colLogFiles = objWMIService.ExecQuery _

("Select * from Win32_NTEventLogFile where LogFileName='Application'")

 

For Each objLogfile in colLogFiles

errBackupLog = objLogFile.BackupEventLog("c:\app.evt")

If errBackupLog <> 0 Then

Wscript.Echo "The Application event log could not be backed up."

Else

objLogFile.ClearEventLog()

End If

Next

 

strComputer = "."

Set objWMIService = GetObject("winmgmts:" _

& "{impersonationLevel=impersonate,(Backup)}!\\" & _

strComputer & "\root\cimv2")

 

Set colLogFiles = objWMIService.ExecQuery _

("Select * from Win32_NTEventLogFile where LogFileName='Security'")

 

For Each objLogfile in colLogFiles

errBackupLog = objLogFile.BackupEventLog("c:\Sec.evt")

If errBackupLog <> 0 Then

Wscript.Echo "The Application event log could not be backed up."

Else

objLogFile.ClearEventLog()

End If

Next

 

strComputer = "."

Set objWMIService = GetObject("winmgmts:" _

& "{impersonationLevel=impersonate,(Backup)}!\\" & _

strComputer & "\root\cimv2")

 

Set colLogFiles = objWMIService.ExecQuery _

("Select * from Win32_NTEventLogFile where LogFileName='System'")

 

For Each objLogfile in colLogFiles

errBackupLog = objLogFile.BackupEventLog("c:\Sys.evt")

If errBackupLog <> 0 Then

Wscript.Echo "The Application event log could not be backed up."

Else

objLogFile.ClearEventLog()

End If

Next

 

den Aufruf einer REG Datei einbinden oder noch besser, den Inhalt der REG-Datei mit dem gleichen Script abarbeiten:

 

 

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application]

"DisplayNameFile"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,\

6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\

00,65,00,6c,00,73,00,2e,00,64,00,6c,00,6c,00,00,00

"DisplayNameID"=dword:00000100

"File"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\

00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,63,00,\

6f,00,6e,00,66,00,69,00,67,00,5c,00,41,00,70,00,70,00,45,00,76,00,65,00,6e,\

00,74,00,2e,00,45,00,76,00,74,00,00,00

"MaxSize"=dword:00080000

"PrimaryModule"="Application"

"Retention"=dword:00000000

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System]

"DisplayNameFile"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,\

6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\

00,65,00,6c,00,73,00,2e,00,64,00,6c,00,6c,00,00,00

"DisplayNameID"=dword:00000102

"File"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\

00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,63,00,\

6f,00,6e,00,66,00,69,00,67,00,5c,00,53,00,79,00,73,00,45,00,76,00,65,00,6e,\

00,74,00,2e,00,45,00,76,00,74,00,00,00

"MaxSize"=dword:00080000

"PrimaryModule"="System"

"Retention"=dword:00000000

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security]

"DisplayNameFile"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,\

6f,00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\

00,65,00,6c,00,73,00,2e,00,64,00,6c,00,6c,00,00,00

"DisplayNameID"=dword:00000101

"File"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\

00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,63,00,\

6f,00,6e,00,66,00,69,00,67,00,5c,00,53,00,65,00,63,00,45,00,76,00,65,00,6e,\

00,74,00,2e,00,45,00,76,00,74,00,00,00

"MaxSize"=dword:00080000

"PrimaryModule"="Security"

"Retention"=dword:00000000

 

thx

[dieseyer 10]

Hallo!

 

> den Aufruf einer REG Datei einbinden oder noch besser, den Inhalt

> der REG-Datei mit dem gleichen Script abarbeiten

Am einfachsten und schnellsten:

regedit /s regdatei.reg

[networker31 10]

Danke, ich dachte aber daran, die reg-einträge direkt im vb-script abzuarbeiten, ohne auf die reg.datei zu verweisen.

[woiza 10]

Hi,

hast du dir schon die Doku zum wsh geholt?

Schau da mal unter regwrite nach. Das ist eine Methode des Shell-Objekts.

 

Gruß

 

woiza

[networker31 10]

hab ich, aber ich benötige das Script morgen früh, wenn jemand weiß wies geht, wär ich sehr verbunden.....

 

:D :D :D

[reiibs 10]

Hallo Networker31

 

Auf der Seite Registry Scripting Center - Use VBScript to view and edit registry findest du Beispielscripts die mit geringen Änderungen lauffähig sind. Aufpassen: Jeder Wert den du auslesen oder schreiben möchtest benötigten einen anderen Aufruf.

 

lg

Reinhard