sqmSQLTool/Install.cmd at main · JankeUwe/sqmSQLTool · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
@echo off
:: sqmSQLTool Installer
:: Stages Install.ps1 locally (strips Mark-of-the-Web) and runs it from there,
:: so it works even when a GPO MachinePolicy (e.g. RemoteSigned) blocks scripts
:: launched directly from a remote/UNC share (\\tsclient\..., cross-domain share).
:: Automatically re-launches elevated (UAC) when AllUsers scope is requested.
::
:: Usage:
::   Install.cmd                   -> auto-detect: AllUsers if Admin, CurrentUser otherwise
::   Install.cmd AllUsers          -> installs system-wide (auto-elevates via UAC if needed)
::   Install.cmd CurrentUser       -> installs for current user only (no elevation needed)
::   Install.cmd AllUsers "D:\Modules\sqmSQLTool"  -> system-wide, custom path

setlocal EnableDelayedExpansion

set "SCRIPT_DIR=%~dp0"
set "SCOPE=%~1"
set "DESTINATION=%~2"

:: ---------------------------------------------------------------
:: Pruefen ob Script bereits als Administrator laeuft
:: ---------------------------------------------------------------
net session >nul 2>&1
set "IS_ADMIN=%errorlevel%"

:: ---------------------------------------------------------------
:: AllUsers (oder kein Scope) ohne Admin -> UAC-Elevation
:: Ausnahme: CurrentUser braucht keine Elevation
:: ---------------------------------------------------------------
if /i not "%SCOPE%"=="CurrentUser" (
    if "%IS_ADMIN%" neq "0" (
        echo.
        echo  sqmSQLTool - Elevation erforderlich
        echo  ============================================================
        echo  AllUsers-Installation benoetigt Administratorrechte.
        echo  Starte UAC-Abfrage ...
        echo.

        if "%DESTINATION%"=="" (
            if "%SCOPE%"=="" (
                powershell.exe -NoProfile -ExecutionPolicy Bypass -Command ^
                    "Start-Process cmd.exe -ArgumentList '/c ""%~f0""' -Verb RunAs"
            ) else (
                powershell.exe -NoProfile -ExecutionPolicy Bypass -Command ^
                    "Start-Process cmd.exe -ArgumentList '/c ""%~f0"" %SCOPE%' -Verb RunAs"
            )
        ) else (
            powershell.exe -NoProfile -ExecutionPolicy Bypass -Command ^
                "Start-Process cmd.exe -ArgumentList '/c ""%~f0"" %SCOPE% ""%DESTINATION%""' -Verb RunAs"
        )
        exit /b 0
    )
)

:: ---------------------------------------------------------------
:: Install.ps1 ausfuehren (laeuft jetzt mit den richtigen Rechten)
:: ---------------------------------------------------------------
echo.
echo  sqmSQLTool - Installation
echo  ============================================================

:: ---------------------------------------------------------------
:: Bootstrap IMMER lokal stagen und von dort starten (kein Remote-Versuch).
:: Grund: Eine per GPO gesetzte MachinePolicy (z.B. RemoteSigned) ueberstimmt
:: -ExecutionPolicy Bypass (Process-Scope). Ein .ps1 von einem Remote-/UNC-Pfad
:: (\\tsclient\..., Netz-Share) wird dann als unsigniertes Remote-Skript
:: blockiert - der Remote-Versuch scheitert in dieser Umgebung IMMER.
:: "type > datei" erzeugt eine frische LOKALE Datei nur aus dem Hauptstream:
:: der Zone.Identifier-ADS (Mark-of-the-Web) wird NICHT uebernommen, damit
:: laeuft das lokale unsignierte Skript unter RemoteSigned.
:: Install.ps1 liest das Modul per robocopy aus -Source (Datei-Lesen ist nicht
:: policy-beschraenkt) und entblockt die Zieldateien anschliessend selbst.
:: ---------------------------------------------------------------
set "BOOT_DIR=%TEMP%\sqmSQLTool_boot"
if not exist "!BOOT_DIR!" md "!BOOT_DIR!"
type "%SCRIPT_DIR%Install.ps1" > "!BOOT_DIR!\Install.ps1"

:: Trailing-Backslash aus SCRIPT_DIR entfernen (sonst Quoting-Bug bei -Source)
set "SRC_DIR=%SCRIPT_DIR%"
if "!SRC_DIR:~-1!"=="\" set "SRC_DIR=!SRC_DIR:~0,-1!"

call :RUN_INSTALL "!BOOT_DIR!\Install.ps1" -Source "!SRC_DIR!"

rmdir /s /q "!BOOT_DIR!" >nul 2>&1

endlocal
pause
goto :EOF

:: ===============================================================
:: Subroutine: Install.ps1 mit den passenden Argumenten starten.
::   %~1 = Pfad zu Install.ps1
::   %~2 %~3 = optionale Zusatzargumente (z.B. -Source "<pfad>")
:: ===============================================================
:RUN_INSTALL
set "PS1=%~1"
:: %2 %3 OHNE Tilde, damit die Quotes um den -Source-Pfad erhalten bleiben
set "EXTRA=%2 %3"
if "%DESTINATION%"=="" (
    if "%SCOPE%"=="" (
        powershell.exe -NoProfile -ExecutionPolicy Bypass -File "%PS1%" %EXTRA%
    ) else (
        powershell.exe -NoProfile -ExecutionPolicy Bypass -File "%PS1%" -Scope "%SCOPE%" %EXTRA%
    )
) else (
    powershell.exe -NoProfile -ExecutionPolicy Bypass -File "%PS1%" -Scope "%SCOPE%" -Destination "%DESTINATION%" %EXTRA%
)
goto :EOF