' clonegg.vbt start

' CloneSecurityPrincipal VBScript
'
' Clone all Global Groups in a domain 
'
' Copyright (C) 1999 Microsoft Corporation.

option explicit

const SCRIPT_FILENAME    = "clonegg.vbs"
const SCRIPT_SOURCE_NAME = __FILE__      
const SCRIPT_DATE        = __DATE__      
const SCRIPT_TIME        = __TIME__      



// this is a Visual Basic Script "Template", used in conjunction with the
// MS Visual C++ Preprocessor to overcome some of the source management
// limitations of VBScript.  Not perfect, but better than a stick in the eye.
// 
// use cl /EP foo.vbt > foo.vbs to expand the template


// this is all our common code.  
#include "clonepr.vbi"

// code common to the scripts that operate on all domain accounts.  We
// supply our own definition of ShouldCloneObject.  For every object for
// which we return True, that object is cloned.

#include "clonedom.vbi"



Main
wscript.quit(0)



' returns True if the object is a global group and not WellKnown Group

function ShouldCloneObject(byref srcObject)
   on error resume next

   if ObjectClass(srcObject) = CLASS_GLOBAL_GROUP then

      sid.SetAs ADS_SID_WINNT_PATH, srcObject.AdsPath & "," & srcObject.Class
      if Err.Number then DumpErrAndQuit

      dim sidString
      sidString = sid.GetAs(ADS_SID_SDDL)
      if Err.Number then DumpErrAndQuit

'To Stop Cloning Well Known Sids Uncomment 4 lines below

     ' if HasWellKnownRid(sidString) then
     '    ShouldCloneObject = False
     '    exit function
     ' end if

      if IsBuiltInSid( sidString ) then
        Echo srcObject.Name & " is a builtin Account."
        Echo "BuiltIn Users and Groups cannot be cloned"
        ShouldCloneObject = False
        exit function
      end if
    
      ShouldCloneObject = True
      exit function
   end if

   ShouldCloneObject = False
end function



' clonegg.vbt end