'=========Скрипт синхронизирует домашние папки пользователей ============
'=======и учетные записи пользователей, удаляя только пустые папки=======
'================== Настройки скрипта====================================

strHomeFolder = "\\server\folder"
strLDAPBase   = "<LDAP://ou=user,ou=all,DC=Domain,DC=RU>"
LogPath = "C:\user_folder_log.txt"

'========================================================================
'========================================================================


Set Dict = CreateObject("Scripting.Dictionary")
Set fso = CreateObject("Scripting.FileSystemObject")
set WshShell = WScript.CreateObject("WScript.Shell")

' Получаем объектную модель исходного каталога
 
Set FS03 = fso.GetFolder(strHomeFolder)
   For Each Folders In FS03.SubFolders
      Dict.Add LCase(Folders.Name), "Delete"
   Next

' Подключаемся к AD и получаем список пользователей.
Set adoCommand = CreateObject("ADODB.Command")
Set adoConnection = CreateObject("ADODB.Connection")
adoConnection.Provider = "ADsDSOObject"
adoConnection.Open "Active Directory Provider"
Set adoCommand.ActiveConnection = adoConnection
Set objRootDSE = GetObject("LDAP://RootDSE")
strFilter = "(&(objectCategory=person)(objectClass=user))"
strAttributes = "sAMAccountName"
strQuery = strLDAPBase & ";" & strFilter & ";" & strAttributes & ";subtree"
adoCommand.CommandText = strQuery
adoCommand.Properties("Page Size") = 100
adoCommand.Properties("Timeout") = 30
adoCommand.Properties("Cache Results") = False
Set adoRecordset = adoCommand.Execute
adoRecordset.MoveFirst

' Сравниваем список папкой и список пользователей
Do Until adoRecordset.EOF
    strName = LCase(adoRecordset.Fields("sAMAccountName").Value)

    If Dict.Exists(strName) = True then
    Dict.Item(strName) = "Ok"
    else
    Dict.Add strName, "Add"
    end if
    
adoRecordset.MoveNext
Loop

adoRecordset.Close
adoConnection.Close

ArrI = Dict.Items
ArrK = Dict.Keys

' Добавляем недостающие папки, выставляем права
For i=0 To Dict.Count-1
  if ArrI(i) = "Add" then
    strFullFolderName = FSO.BuildPath(strHomeFolder, ArrK(i))
    FSO.CreateFolder strFullFolderName
    Username = ArrK(i)
    intRun = WshShell.Run("fileacl.exe " & strFullFolderName & " /replace",0,true)
    intRun = WshShell.Run("fileacl.exe " & strFullFolderName & " /G BUILTIN\Administrators:F",0,true)
    intRun = WshShell.Run("fileacl.exe " & strFullFolderName & " /G "& Username & ":C",0,true)
  End If
Next

ArrItems = Dict.Items
ArrKeys = Dict.Keys

' Удаляем пустые ненужные папки
For j=0 To Dict.Count-1
'On Error Resume Next

if ArrItems(j) = "Delete" then 
  
  strFullFolderName = FSO.BuildPath(strHomeFolder, ArrKeys(j))
  Set DelFolder = FSO.GetFolder(strFullFolderName)
   if DelFolder.Size = 0 then
         DelFolder.Delete
    Dict.Item(ArrKeys(j)) = "Удалено успешно"
       else
    Dict.Item(ArrKeys(j)) = "Не удалено (папка не пуста)"
   end if
end if

Next

'Пишем Лог файл
Set TextStream = FSO.OpenTextFile(LogPath, 2, True)
Items = Dict.Items
Keys = Dict.Keys

For g=0 To Dict.Count-1
TextStream.WriteLine Keys(g) &" - "& Items(g)
Next
WScript.Echo "Готово"
WScript.Quit 0