IMAPI is the optical burning engine in Windows products. Version 2 of IMAPI will extend Windows Vista support for DVD media to Windows XP and to Windows Server 2003.

I wasn’t previously aware of this API and it looks pretty cool, TechNet has full details on the API and how to use it:

• Introduction to IMAPIv2 for Script Writers
• Burning CDs and DVDs from Scripts

Here are the links for the KB article describing the version 2.0 update and where to download it for Windows XP/Server 2003:

• Description of the Image Mastering API v2.0 (IMAPIv2.0) update package
• Image Mastering API v2.0 for Windows XP
• Image Mastering API v2.0 for Windows Server 2003
• Image Mastering API v2.0 for Windows XP x64 Edition
• Image Mastering API v2.0 for Windows Server 2003 x64 Edition

CD/DVD Writing via Script with IMAPIv2 is post from stealthpuppy.com. Except as noted otherwise, this work is © 2005-2012 Aaron Parker and is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported License.

As Joe Shonk points out though, you don’t need to re-publish each application, you only need to updae the icon. To that end, I’ve created another script that will do this for you:

Update Published Application Icons 1.0

This script will go through each published application and update it with the icon from the applications executable. It its current form the script may not be suitable for your environment so you may need to modify it.

Script: Update Published Application Icons is post from stealthpuppy.com. Except as noted otherwise, this work is © 2005-2012 Aaron Parker and is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported License.

This script uses arrays of values for the privileges (I’ve used the value rather than their names to reduce the size of the script. See the SDK documentation if you would rather refer to the privileges by their names). The arrays listed in the code will set every single privilege so you will need to edit them when setting your own administrator accounts.

The script can be broken down into this process:

1. Set the privilege arrays.
2. Return the list of Application and Server folders.
3. Bind to the Presentation Server farm.
4. Create the administrator account.
5. Bind to the new administrator account and set the first set of privileges.
6. Bind to the Server folders and assign privileges to the new administrator account.
7. Bind to the Applications folders and assign privileges to the new administrator account.

The script uses a function to add privileges to the Application or Server folders. Pass the folder name, the folder type (MetaFrameAppFolder or MetaFrameSrvFolder), the account domain and account name and the privilege set as an array and the function does the rest.

During testing I have noticed that the privileges are not set on the last Application folder in the list – if you take a look at the code you can see that I am setting the privileges on that folder a second time. If anyone else is seeing this behaviour please let me know.

Creating Custom MetaFrame Admins with VBscript: Part 2 is post from stealthpuppy.com. Except as noted otherwise, this work is © 2005-2012 Aaron Parker and is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported License.

The process for creating a custom administrator account and setting privileges goes like this:

1. Create the custom administrator account.
2. Bind to the new account and add privileges except for those that apply to application or server folders.
3. Bind to the Applications folder/s and add privileges for the specified administrator.
4. Bind to the Servers folder/s and add privileges for the specified administrator.

As you can see the process isn’t completed in a single step, there are actually three seperate steps to setting privileges. The first is setting privileges on the objects outlined here in this screenshot (those objects in colour):

The next steps set the permissions on the folder objects rather than the administrator object as outlined in this screenshot (those objects in colour):

Something I should note here though, is that I’ve not been able to set permissions on the Monitoring Profiles folder. I could be wrong but from what I can tell you can’t currently access these types of folders.

Reading The Privileges
First up I had to read the privileges from an existing object to make it simpler to set the privileges on any new administrators – you’ve gotta learn to read before you can write. Initially setting the privileges is easy via the Access Management Console then programatically reading back then simplifies the write process.

Reading the privileges on an administrator account is simple enough because we can bind to the administrator object and then read the privileges. Reading the privileges for that account on the Applications and Servers folders is a little different – unless you want to statically supply the list of folders, you’ll need to enumerate them.

I’ve created a fuction and a few subroutines, based on some code from the CDN forums, that will return an array containing the distinguished names of the Application or Server folders. The code essentially walks the folder tree to find the subfolders of each folder, while calling itself to do so until the subfolder count reaches 0.

The full script will echo out the privleges in both the numerical value and the privilege name defined by MetaFrameAdminPrivilege. Check out the MFCOM SDK 4.5 for a complete list of the privileges. This script will work on Presentation Server 4.0 and 4.5, I’ve not tested on any earlier versions.

Continue to part 2 here

Creating Custom MetaFrame Admins with VBscript: Part 1 is post from stealthpuppy.com. Except as noted otherwise, this work is © 2005-2012 Aaron Parker and is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported License.

The TechNet script centre has a two-part, detailed article on how to query Active Directory which is a great resource for this type of query. Here a script I’ve used to query Notes for user objects and return their e-mail addresses. The LDAP query includes a server name so that it will connect to a specific server. This will attempt an anonymous query so you will have to extend this script to make an authenticated query.

Const ADS_SCOPE_SUBTREE = 2
Set objConnection = CreateObject("ADODB.Connection")
Set objCommand =   CreateObject("ADODB.Command")
objConnection.Provider = "ADsDSOObject"
objConnection.Open "Active Directory Provider"
Set objCommand.ActiveConnection = objConnection
objCommand.Properties("Page Size") = 1000
objCommand.Properties("Searchscope") = ADS_SCOPE_SUBTREE

WScript.Echo "Executing LDAP query.."
objCommand.CommandText = "SELECT * FROM 'LDAP://server/o=org' WHERE objectClass='dominoPerson' AND mail='*'"
Set objRecordSet = objCommand.Execute
WScript.Echo "Query complete. Found " & objRecordSet.RecordCount & " objects."

objRecordSet.MoveFirst
Do Until objRecordSet.EOF
Set objUser = GetObject(objRecordSet.Fields("ADsPath").Value)
WScript.Echo objUser.mail
objRecordSet.MoveNext
Loop

You can also find information and example for querying 3rd party LDAP servers with ADSI in these knowledgebase articles:

• INFO: How to Use ADSI to Query a Third-Party LDAP Server
• How To Query Exchange 5.x Anonymously Through ADSI

Here’s a function that uses a different query method that will return an array of user distinguished names based on the search string passed to it. For example, if you pass the following string “OU=Sales,O=DominoOrg” it will only return users in the Sales OU below the DominoOrg organisation:

'Return the distinguished name of all of the user objects below the specified organisation
Function fReturnDominoDNs(sDominoServer, sDominoScope)
Dim aArray()
Dim i: i = 0

Set oConnection = CreateObject("ADODB.Connection")
Set oRecordset = CreateObject("ADODB.Recordset")
Set oCommand = CreateObject("ADODB.Command")

oConnection.Provider = "ADsDSOObject"
oConnection.Properties("User ID") = ""
oConnection.Properties("Password") = ""
oConnection.Properties("Encrypt Password") = False
oConnection.Open "ADs Provider"
oCommand.ActiveConnection = oConnection
oCommand.Properties("Page Size") = 1000

'Output of query looks like this: GC://server:389/CN=Joe Blogs,OU=Sales,O=DominoOrg
oCommand.CommandText = "<gc:>;(objectClass=dominoPerson);*;subtree"
Set oRecordset = oCommand.Execute</gc:>

If oRecordSet.RecordCount <> 0 Then
oRecordSet.MoveFirst
Do Until oRecordSet.EOF
If InStr(oRecordset.Fields("ADsPath").Value, sDominoScope) Then
ReDim Preserve aArray(i)
aArray(i) = Right(oRecordSet.Fields("ADsPath").Value, Len(oRecordSet.Fields("ADsPath").Value)-Instr(Len("GC://" & sDominoServer & ":389"), oRecordSet.Fields("ADsPath").Value, "CN=")+1)
i = i + 1
End If
oRecordset.MoveNext
Loop
End If
fDominoUserDNs = aArray
Set oConnection = Nothing
Set oCommand =   Nothing
Set oRecordset = Nothing
End Function

Quering Domino via LDAP with VBscript is post from stealthpuppy.com. Except as noted otherwise, this work is © 2005-2012 Aaron Parker and is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported License.