PowerShell.com
Library » Script Library » WMI » Change-ServiceAccount

Change-ServiceAccount

Previous | Next | View all files | View Slideshow
posted by Brian Hagerty
11-13-2009
Downloads: 624
File size: 12.4kB
Views: 3,161
Embed
Change-ServiceAccount
  1. # ============================================================================================== 
  2. # NAME:            Change-ServiceAcct 
  3. # AUTHOR:        Brian Hagerty 
  4. # DATE:            03/04/2009 
  5. # COMMENT:         Changes service account properties for the specified computer(s) 
  6. # MODIFIED:         
  7. # ============================================================================================== 
  8.  
  9. function Change-ServiceAcct ([string]$ServiceName, $DisplayName = $null, $PathName = $null, $ServiceType = $null, $ErrorControl = $null, $StartMode = $null, $DesktopInteract = $true, [string]$StartName, [string]$StartPassword, $LoadOrderGroup = $Null, $LoadOrderGroupDependencies = $Null, $ServiceDependencies = $Null, [switch]$GrantNTRights) { 
  10.     BEGIN {         
  11.         # Display help content, if -? is specified at command line 
  12.         if ($args -contains '-?') { 
  13.             ChangeServiceAccountHelp 
  14.             break 
  15.         } 
  16.         if($ServiceName -eq $([regex]"[A-z0-9]")) {Throw "A service name must be specified"} 
  17.     } 
  18.     PROCESS { 
  19.         Test-Pipeline                    # Ensures valid pipeline input is specified 
  20.         $computer = $_                    # Store incoming computer name from pipeline for readability 
  21.          
  22.         $service = Get-WmiObject -ComputerName $computer -Class WIN32_Service | Where-Object {$_.Name -match $ServiceName} 
  23.         $OriginalServiceState = $($service.State) 
  24.          
  25.         if($service -eq $Null) {Throw "The service $ServiceName, does not exist on $computer"} 
  26.         else { 
  27.             if($service.State -eq "Started") {  
  28.                 Write-Host -ForegroundColor Green "`n`nComputer: $computer" 
  29.                 Write-Host -ForegroundColor Yellow "Service $($service.Name) is started, stopping the service..." 
  30.                 $service.StopService() 
  31.                  
  32.                 Write-Host -ForegroundColor Cyan "`nApplying changes to the service $($service.Name)..." 
  33.                 $returnCode = $($service.Change($DisplayName,$PathName,$ServiceType,$ErrorControl,$StartMode,$DesktopInteract,$StartName,$StartPassword,$LoadOrderGroup,$LoadOrderGroupDependencies,$ServiceDependencies)).ReturnValue 
  34.                  
  35.                 if($GrantNTRights.IsPresent) { GrantNTRights $StartName $computer } 
  36.                  
  37.                 ReturnCodeTest $returnCode $OriginalServiceState 
  38.             } else { 
  39.                 Write-Host -ForegroundColor Green "`n`nComputer: $computer" 
  40.                 Write-Host -ForegroundColor Yellow "Service $($service.Name) is stopped, continuing..." 
  41.                  
  42.                 Write-Host -ForegroundColor Cyan "Applying changes to the service $($service.Name)..." 
  43.                 $returnCode = $($service.Change($DisplayName,$PathName,$ServiceType,$ErrorControl,$StartMode,$DesktopInteract,$StartName,$StartPassword,$LoadOrderGroup,$LoadOrderGroupDependencies,$ServiceDependencies)).ReturnValue 
  44.                  
  45.                 if($GrantNTRights.IsPresent) { GrantNTRights $StartName $computer } 
  46.                  
  47.                 ReturnCodeTest $returnCode $OriginalServiceState 
  48.             } 
  49.         } 
  50.     } 
  51. } 
  52.  
  53. function GrantNTRights ([string]$user, [string]$computer) { 
  54.     $NTRights = 'C:\Program` Files\Windows` Resource Kits\Tools\ntrights.exe' 
  55.     $NTRightsCmd = $NTRights + " -u $user -m \\$computer +r SeServiceLogonRight" 
  56.     Invoke-Expression $NTRightsCmd 
  57. } 
  58.  
  59. function ReturnCodeTest ([int]$returnCode, [string]$OriginalServiceState) { 
  60.     if ($returnCode -eq 0) { 
  61.         if($OriginalServiceState -eq "Started") { 
  62.             Write-Host -ForegroundColor Cyan "Service was originally started, restarting service: $($service.Name)" 
  63.             $service.StartService() 
  64.         } 
  65.         else { Write-Host -ForegroundColor Cyan "Service was not originally started, not restarting service: $($service.Name)" } 
  66.     } 
  67.     else { ReturnCodeSwitch $returnCode } 
  68. } 
  69.  
  70. function ReturnCodeSwitch ([int]$returnCode) { 
  71.     switch ($returnCode) { 
  72.         1 {Write-Host -ForegroundColor Red "Not Supported"; break} 
  73.         2 {Write-Host -ForegroundColor Red "Access Denied"; break} 
  74.         3 {Write-Host -ForegroundColor Red "Dependent Services Running"; break} 
  75.         4 {Write-Host -ForegroundColor Red "Invalid Service Control"; break} 
  76.         5 {Write-Host -ForegroundColor Red "Service Cannot Accept Control"; break} 
  77.         6 {Write-Host -ForegroundColor Red "Service Not Active"; break} 
  78.         7 {Write-Host -ForegroundColor Red "Service Request Timeout"; break} 
  79.         8 {Write-Host -ForegroundColor Red "Unknown Failure"; break} 
  80.         9 {Write-Host -ForegroundColor Red "Path Not Found"; break} 
  81.         10 {Write-Host -ForegroundColor Red "Service Already Running"; break} 
  82.         11 {Write-Host -ForegroundColor Red "Service Database Locked"; break} 
  83.         12 {Write-Host -ForegroundColor Red "Service Dependency Deleted"; break} 
  84.         13 {Write-Host -ForegroundColor Red "Service Dependency Failure"; break} 
  85.         14 {Write-Host -ForegroundColor Red "Service Disabled"; break} 
  86.         15 {Write-Host -ForegroundColor Red "Service Logon Failure"; break} 
  87.         16 {Write-Host -ForegroundColor Red "Service Marked For Deletion"; break} 
  88.         17 {Write-Host -ForegroundColor Red "Service No Thread"; break} 
  89.         18 {Write-Host -ForegroundColor Red "Status Circular Dependency"; break} 
  90.         19 {Write-Host -ForegroundColor Red "Status Duplicate Name"; break} 
  91.         20 {Write-Host -ForegroundColor Red "Status Invalid Name"; break} 
  92.         21 {Write-Host -ForegroundColor Red "Status Invalid Parameter"; break} 
  93.         22 {Write-Host -ForegroundColor Red "Status Invalid Service Account"; break} 
  94.         23 {Write-Host -ForegroundColor Red "Status Service Exists"; break} 
  95.         24 {Write-Host -ForegroundColor Red "Service Already Paused"; break} 
  96.     } 
  97. } 
  98.  
  99. # ============================================================================================== 
  100. # NAME:            ChangeServiceAccountHelp 
  101. # AUTHOR:        Brian Hagerty 
  102. # DATE:            03/03/2009 
  103. # COMMENT:         Help function for the Change-ServiceAcct function 
  104. # MODIFIED:         
  105. # ============================================================================================== 
  106.  
  107. function ChangeServiceAccountHelp { 
  108.     Write-Host -ForegroundColor Yellow "`n`nPURPOSE: Pipeline function! Accepts computer names from pipeline & changes specific properties for the specified service account." 
  109.     Write-Host -ForegroundColor Cyan "`nSYNTAX: $computername_array [[string]computerName] | Change-ServiceAcct [string]ServiceName [[string]DisplayName [string]PathName [byte]ServiceType [byte]ErrorControl [string]StartMode [boolean]DesktopInteract [string]StartName [string]StartPassword [string]LoadOrderGroup [string[]]LoadOrderGroupDependencies [string[]]ServiceDepencies" 
  110.      
  111.     Write-Host -ForegroundColor Cyan "`n`nDisplayName :" 
  112.     Write-Host -ForegroundColor Green "The display name of the service. This string has a maximum length of 256 characters. The name is case-preserved in the service control manager. DisplayName comparisons are always case-insensitive." 
  113.     Write-Host -ForegroundColor Yellow "Example :  ""Atdisk""" 
  114.      
  115.     Write-Host -ForegroundColor Cyan "`n`nPathName :" 
  116.     Write-Host -ForegroundColor Green "The fully-qualified path to the executable file that implements the service." 
  117.     Write-Host -ForegroundColor Yellow "Example :  ""\SystemRoot\System32\drivers\afd.sys""" 
  118.      
  119.     Write-Host -ForegroundColor Cyan "`n`nServiceType:" 
  120.     Write-Host -ForegroundColor Green "The type of services provided to processes that call them." 
  121.     Write-Host -ForegroundColor Yellow "`nValues [Value - Meaning]:" 
  122.     Write-Host -ForegroundColor Yellow "------------------------------------------" 
  123.     Write-Host -ForegroundColor Yellow "10x1 - Kernel Driver" 
  124.     Write-Host -ForegroundColor Yellow "20x2 - File System Driver" 
  125.     Write-Host -ForegroundColor Yellow "40x4 - Adapter" 
  126.     Write-Host -ForegroundColor Yellow "80x8 - Recognizer Driver" 
  127.     Write-Host -ForegroundColor Yellow "160x10 - Own Process" 
  128.     Write-Host -ForegroundColor Yellow "320x20 - Share Process" 
  129.     Write-Host -ForegroundColor Yellow "2560x100 - Interactive Process" 
  130.      
  131.     Write-Host -ForegroundColor Cyan "`n`nErrorControl :" 
  132.     Write-Host -ForegroundColor Green "Severity of the error if this service fails to start during startup. The value indicates the action taken by the startup program if failure occurs. All errors are logged by the system." 
  133.     Write-Host -ForegroundColor Yellow "`nValues [Value - Meaning]:" 
  134.     Write-Host -ForegroundColor Yellow "------------------------------------------" 
  135.     Write-Host -ForegroundColor Yellow "0 - Ignore. User is not notified." 
  136.     Write-Host -ForegroundColor Yellow "1 - Normal. User is notified." 
  137.     Write-Host -ForegroundColor Yellow "2 - Severe. System is restarted with the last-known-good configuration." 
  138.     Write-Host -ForegroundColor Yellow "3 - Critical. System attempts to restart with a good configuration." 
  139.      
  140.      
  141.     Write-Host -ForegroundColor Cyan "`n`nStartMode:"  
  142.     Write-Host -ForegroundColor Green "Start mode of the Windows base service." 
  143.     Write-Host -ForegroundColor Yellow "`nValues [Value - Meaning]:" 
  144.     Write-Host -ForegroundColor Yellow "------------------------------------------" 
  145.     Write-Host -ForegroundColor Yellow "Boot - Device driver started by the operating system loader." 
  146.     Write-Host -ForegroundColor Yellow "System - Device driver started by the operating system initialization process. Valid only for driver services." 
  147.     Write-Host -ForegroundColor Yellow "Automatic - Service to be started automatically by the service control manager during system startup." 
  148.     Write-Host -ForegroundColor Yellow "Manual - Service to be started by the service control manager when a process calls the StartService method." 
  149.     Write-Host -ForegroundColor Yellow "Disabled - Service that can no longer be started." 
  150.      
  151.     Write-Host -ForegroundColor Cyan "`n`nDesktopInteract:" 
  152.     Write-Host -ForegroundColor Green "If true, the service can create or communicate with a window on the desktop." 
  153.      
  154.     Write-Host -ForegroundColor Cyan "`n`nStartName:" 
  155.     Write-Host -ForegroundColor Green "Account name the service runs under. Depending on the service type, the account name may be in the form of DomainName\Username or .\Username. The service process will be logged using one of these two forms when it runs. If the account belongs to the built-in domain, .\Username can be specified. If NULL is specified, the service will be logged on as the LocalSystem account. For kernel or system-level drivers, StartName contains the driver object name (that is, \FileSystem\rdr or \Driver\Xns) that the input and output (I/O) system uses to load the device driver. If NULL is specified, the driver runs with a default object name created by the I/O system based on the service name, for example, ""DWDOM\Admin"". You also can use the User Principal Name (UPN) format to specify the StartName, for example, Username@DomainName." 
  156.      
  157.     Write-Host -ForegroundColor Cyan "`n`nStartPassword:" 
  158.     Write-Host -ForegroundColor Green "Password to the account name specified by the StartName parameter. Specify NULL if you are not changing the password. Specify an empty string if the service has no password. (Note:  When changing a service from a local system to a network, or from a network to a local system, StartPassword must be an empty string ("""") and not NULL.)" 
  159.      
  160.     Write-Host -ForegroundColor Cyan "`n`nLoadOrderGroup:" 
  161.     Write-Host -ForegroundColor Green "Group name that it is associated with. Load order groups are contained in the system registry, and determine the sequence in which services are loaded into the operating system. If the pointer is NULL, or if it points to an empty string, the service does not belong to a group. Dependencies between groups should be listed in the LoadOrderGroupDependencies parameter. Services in the load-ordering group list are started first, followed by services in groups not in the load-ordering group list, followed by services that do not belong to a group. The system registry has a list of load ordering groups located at HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ServiceGroupOrder." 
  162.      
  163.     Write-Host -ForegroundColor Cyan "`n`nLoadOrderGroupDependencies:" 
  164.     Write-Host -ForegroundColor Green "List of load-ordering groups that must start before this service starts. The array is doubly null-terminated. If the pointer is NULL, or if it points to an empty string, the service has no dependencies. Group names must be prefixed by the SC_GROUP_IDENTIFIER (defined in the Winsvc.h file) character to differentiate them from service names because services and service groups share the same name space. Dependency on a group means that this service can run if at least one member of the group is running after an attempt to start all of the members of the group." 
  165.      
  166.     Write-Host -ForegroundColor Cyan "`n`nServiceDependencies:" 
  167.     Write-Host -ForegroundColor Green "List that contains the names of services that must start before this service starts. The array is doubly NULL-terminated. If the pointer is NULL, or if it points to an empty string, the service has no dependencies. Dependency on a service indicates that this service can run only if the service it depends on is running." 
  168.     Write-Host 
  169. } 

Accepts computer names from pipeline & changes specific properties for the specified service account.

NTRIGHTS Utility is used to grant a Service Account logon privileges.

NTRIGHTS Utility is part of the Windows Server 2003 Resource Kit

Copyright 2012 PowerShell.com. All rights reserved.