Script to encrypt multiple disks and send the encryption keys to email and onedrive

Download JSON Download Python

Ratings

(0)

Release Time

03/28/2022

Downloads

548 times

Update Time

11/20/2024

Views

1328 times

Share-it:

Tags

No results found.

Description
Screen Shots

NOTE:

1. Run as Local System User

PARAMETERS:

1.Provide the receiver email id which you want to send email in variable path "Receiver"

2.Provide the sender email id from you want to send email in variable path "Sender"

3. Provide sender email id password in variable path "Password"

4. Provide onedrive admin account id in variable path "onedrive_admin_account" where you want to upload your recovery key

5. Provide onedrive admin account password in variable path "onedrive_account_password"

6.Provide your onedrive url in variable path "onedrive_url" where you want to upload your recovery key

7.Change the disk names you want to encrypt in "Drive"

Procedure's Instructions

Receiver = itsm.getParameter('EmailTo')  ## Provide an Toemail address where the mail need to be sent.
Sender = itsm.getParameter('EmailFrom')  ## Provide the From Email address from which the mail to be send
Password = itsm.getParameter('Password')               ##Provide password for from email
onedrive_admin_account = itsm.getParameter('Onedrive_admin_account') #prvide your onedrive admin account id here
onedrive_account_password = itsm.getParameter('Onedrive_account_password') #provide your onedrive account password
onedrive_url = itsm.getParameter('Onedrive_url') #provide your onedrive url
Drive = ["C:","D:"] #provide the disk names you want to encrypt
save = "C:"

import os
import subprocess
import ctypes
import re
import urllib 
import smtplib
import mimetypes
import socket
import ssl 
from email.mime.multipart import MIMEMultipart
from email import encoders
from email.message import Message
from email.mime.audio import MIMEAudio
from email.mime.base import MIMEBase
from email.mime.image import MIMEImage
from email.mime.text import MIMEText

content = r'''$User = %s%s%s
$SiteURL = %s%s%s

$Folder = "C:\Recoverykey"
$DocLibName = "Documents"

#Add references to SharePoint client assemblies and authenticate to Office 365 site – required for CSOM
Add-Type -Path "C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\15\ISAPI\Microsoft.SharePoint.Client.dll"
Add-Type -Path "C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\15\ISAPI\Microsoft.SharePoint.Client.Runtime.dll"

$Password  = ConvertTo-SecureString %s%s%s -AsPlainText -Force

#Bind to site collection
$Context = New-Object Microsoft.SharePoint.Client.ClientContext($SiteURL)
$Creds = New-Object Microsoft.SharePoint.Client.SharePointOnlineCredentials($User,$Password)

$Context.Credentials = $Creds

#Retrieve list
$List = $Context.Web.Lists.GetByTitle("$DocLibName")

$Context.Load($List)

$Context.ExecuteQuery()

#Upload file
Foreach ($File in (dir $Folder -File))
{
$FileStream = New-Object IO.FileStream($File.FullName,[System.IO.FileMode]::Open)
$FileCreationInfo = New-Object Microsoft.SharePoint.Client.FileCreationInformation
$FileCreationInfo.Overwrite = $true
$FileCreationInfo.ContentStream = $FileStream
$FileCreationInfo.URL = $File
$Upload = $List.RootFolder.Files.Add($FileCreationInfo)
$Context.Load($Upload)
$Context.ExecuteQuery()
}'''%('"',str(onedrive_admin_account),'"','"',str(onedrive_url),'"','"',str(onedrive_account_password),'"')
cp_name = os.environ['COMPUTERNAME']
ip = socket.gethostbyname(socket.gethostname())
if not os.path.exists(os.path.join(save+r"\\Recoverykey")):
    os.makedirs(os.path.join(save+r"\\Recoverykey"))
else:
    pass 
fp=os.path.join("C:\\Recoverykey\\Recoverykey.txt")

def onedrive(file):
    url_64 = "https://script-downloads.itarian.com/sharepoint/sharepointclientcomponents_64.msi"
    url_32 = "https://script-downloads.itarian.com/sharepoint/sharepointclientcomponents_86.msi"
    if os.path.exists("C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\15\ISAPI"):
        pass 
    else:
        obj=subprocess.Popen("wmic os get osarchitecture",shell=True,stdout=subprocess.PIPE,stderr=subprocess.PIPE)
        result,error=obj.communicate()
        if error:
            print(error)
        else:
            operating_system = result.split()

if '64-bit' in operating_system :
            destination = "C:\\sharepoint_64.msi"
            gcontext = ssl.SSLContext(ssl.PROTOCOL_TLSv1)
            download = urllib.urlretrieve(url_64,destination,context = gcontext)
            save_path = 'C:\\'
            file_name = "sharepoint.bat"
            completeName = os.path.join(save_path, file_name)
            file1 = open(completeName, "w+")
            file1.write('''@echo off
                        msiexec /i C:\\sharepoint_64.msi /quiet /qn /log c:\users\install.log
                        ''')
            file1.close()
            cmd = subprocess.Popen(completeName,shell=True,stdout=subprocess.PIPE,stderr=subprocess.PIPE)
            result_1,error_1=cmd.communicate()
            if error_1:
                print(error_1)
            else:
                pass 
        else:
            destination = "C:\\sharepoint_32.msi"
            gcontext = ssl.SSLContext(ssl.PROTOCOL_TLSv1)
            download = urllib.urlretrieve(url_32,destination,context = gcontext)
            save_path = 'C:\\'
            file_name = "sharepoint.bat"
            completeName = os.path.join(save_path, file_name)
            file1 = open(completeName, "w+")
            file1.write('''@echo off
                        C:\\Recoverykey\\sharepoint_32.msi /quiet /qn /log c:\users\install.log
                        ''')
            file1.close()
            cmd = subprocess.Popen(completeName,shell=True,stdout=subprocess.PIPE,stderr=subprocess.PIPE)
            result_2,error_2=cmd.communicate()
            if error_2:
                print(error_2)
            else:
                pass 
    cmd = subprocess.Popen(["powershell","Set-ExecutionPolicy RemoteSigned"],shell=True,stdout=subprocess.PIPE,stderr=subprocess.PIPE)
    result,error=cmd.communicate()
    if error:
        print(error)
    else:
        cmd_1 = subprocess.Popen(["powershell",file],shell=True,stdout=subprocess.PIPE,stderr=subprocess.PIPE)
        result_1,error_1=cmd_1.communicate()
        if error_1:
            print(error_1)
        else:
            print ("Recovery key uploaded to onedrive account "+onedrive_admin_account)

def gmail(sender_email,password,receiver,file):
    fileToSend = file 
    msg = MIMEMultipart()
    msg["From"] = sender_email
    msg["To"] = receiver
    msg["Subject"] = "Recovery key file attached"
    
    ctype, encoding = mimetypes.guess_type(fileToSend)
    if ctype is None or encoding is not None:
        ctype = "application/octet-stream"

maintype, subtype = ctype.split("/", 1)

if maintype == "text":
        cp = open(fileToSend)
        # Note: we should handle calculating the charset
        attachment = MIMEText(cp.read(), _subtype=subtype)
        cp.close()
    elif maintype == "image":
        cp = open(fileToSend, "rb")
        attachment = MIMEImage(cp.read(), _subtype=subtype)
        cp.close()
    elif maintype == "audio":
        cp = open(fileToSend, "rb")
        attachment = MIMEAudio(cp.read(), _subtype=subtype)
        cp.close()
    else:
        cp = open(fileToSend, "rb")
        attachment = MIMEBase(maintype, subtype)
        attachment.set_payload(cp.read())
        cp.close()
        encoders.encode_base64(attachment)
    attachment.add_header("Content-Disposition", "attachment", filename=fileToSend)
    msg.attach(attachment)
    server = smtplib.SMTP("smtp.gmail.com:587")
    server.starttls()
    server.login(sender_email,password)
    server.sendmail(sender_email, receiver, msg.as_string())
    server.quit()

class disable_file_system_redirection:
    _disable = ctypes.windll.kernel32.Wow64DisableWow64FsRedirection
    _revert = ctypes.windll.kernel32.Wow64RevertWow64FsRedirection
    def __enter__(self):
        self.old_value = ctypes.c_long()
        self.success = self._disable(ctypes.byref(self.old_value))
    def __exit__(self, type, value, traceback):
        if self.success:
            self._revert(self.old_value)
    
with disable_file_system_redirection():
    for drive in Drive:
        path = 'C:\\Windows\\System32\\manage-bde.exe -status '+drive
        cmd = subprocess.Popen(path,shell=True,stdout=subprocess.PIPE,stderr=subprocess.PIPE)
        res, err = cmd.communicate()
        if err:
            print err 
        else:
            protect = re.findall("Lock Status:          (.*)",res)
            sta = re.findall("Conversion Status:    (.*)",res)
            pro="".join(protect)
            status = "".join(sta) 
            if "Unlocked" in pro and "Fully Decrypted" in status:
                print "Disk "+drive+" is now in locked state"
                cmd_1 = subprocess.Popen('manage-bde -on '+drive+' -RecoveryKey '+save+' -RecoveryPassword',shell=True,stdout=subprocess.PIPE,stderr=subprocess.PIPE)
                res_1, err_1 = cmd_1.communicate()
                if err_1:
                    print err_1
                else:
                    keyword = "ACTIONS REQUIRED:"
                    before_keyword, keyword, after_keyword = res_1.partition(keyword)
                    recovery_key = (after_keyword.strip().splitlines()[3])
                    print("Encryption is now in progress for Disk"+" "+drive)
                    if os.path.exists(fp):
                        with open(fp,"a") as f:
                            f.write("Recovery Password for Disk "+drive+"  ")
                            f.write(recovery_key+"\n")
                            f.close()
                    else:
                        with open (fp,"w") as f:
                            f.write("Computer Name : "+cp_name+"\n")
                            f.write("IP-Address : "+ip +"\n")
                            f.write("Recovery Password for Disk "+drive+"  ")
                            f.write(recovery_key+"\n")
                            f.close()
            else:
                print("Disk "+drive+" already Encrypted")
    if os.path.exists(fp):
        gmail(Sender,Password,Receiver,fp)
        print("Recovery key emailed to "+Receiver)
        file_path="C:\\powershell_file.ps1"
        with open(file_path, 'wb') as wr:
            wr.write(content)
        onedrive(file_path)
        os.remove(file_path)
    else:
        pass

Comments

No Comments.

Script to encrypt multiple disks and send the encryption keys to email and onedrive

Comments

Leave a Comment