批处理变量通过call反向传递至主脚本失败问题排查

我尝试通过call命令将子脚本生成的变量传递回主脚本main.bat，当前脚本结构是main.bat调用VerifyCredentials.bat，后者又会调用CreateAdminCreds.bat生成%AdminUser%和%AdminPass%变量。所有脚本单独运行正常，但在main.bat中使用%AdminPass%设置本地管理员密码时，密码并未生效（重启后无需密码即可登录）。我用测试脚本验证过call的变量传递逻辑是有效的，但实际场景中就是失败。

相关脚本代码 #

main.bat #

REM Define all the variables that will be updated by other batch files.
set NewCompName= & set DomainUser= & set DomainPass= & set AdminUser= & set AdminPass=

REM Create the variables for the domain tech account and local admin account. Verify tech account can access SCCM file share.
set CredTestVar=0
:CredTestLoop
call CreateCompName.bat & call VerifyCredentials.bat & call TestCredentials.bat
if %CredTestVar% LSS 1 goto CredTestLoop

REM Activate the local admin account and set password
ECHO Enabling Administrator account
net user administrator /active:yes
net user administrator "%AdminPass%"
ECHO.

VerifyCredentials.bat #

@ECHO off

if not exist Credentials\DomainUser.txt call CreateDomainCreds.bat
if not exist Credentials\DomainPass.txt call CreateDomainCreds.bat

for /f "delims=" %%x in (Credentials\DomainUser.txt) do set DomainUser=%%x
for /f "delims=" %%x in (Credentials\DomainPass.txt) do set DomainPass=%%x

if not exist Credentials\AdminUser.txt call CreateAdminCreds.bat
if not exist Credentials\AdminPass.txt call CreateAdminCreds.bat

for /f "delims=" %%x in (Credentials\AdminUser.txt) do set AdminUser=%%x
for /f "delims=" %%x in (Credentials\AdminPass.txt) do set AdminPass=%%x

CreateAdminCreds.bat #

@ECHO off

REM Create and define the local administrator credentials
:CreateAdmin
cls
echo.
echo Please enter a new password for the local Administrator account
echo.
set "AdminUser=Administrator"
set /p "AdminPass=Administrator Password:"
goto :ResponseAdmin

:ResponseAdmin
set "AdminAnswer="
cls
echo.
echo The Administrator password is "%AdminPass%"
echo.
set /p "AdminAnswer=Is this correct? (y/n):"
if %AdminAnswer%==y () else (if %AdminAnswer%==n (goto :CreateAdmin) else (goto :ResponseAdmin))

(echo=%AdminUser%) > "Credentials\AdminUser.txt"
(echo=%AdminPass%) > "Credentials\AdminPass.txt"
set "AdminAnswer="

测试验证脚本（变量传递有效） #

test1.bat #

@ECHO off

set testvar=
echo testvar is currently equal to %testvar%
REM this returns "testvar is currently equal to"
call test2.bat
echo testvar is now equal to %testvar%
REM this returns "testvar is now equal to something"

test2.bat #

@ECHO off

set testvar="something"

问题原因及解决方法 #

1. 相对路径导致文件读写不匹配 #

子脚本中使用的Credentials\xxx.txt是相对路径，如果main.bat运行时的当前工作目录与子脚本所在目录不一致，会出现CreateAdminCreds.bat在子目录创建文件，VerifyCredentials.bat却在主目录读取文件的情况，最终导致AdminPass变量无法被正确赋值。

解决方法：
在所有脚本中统一使用绝对路径，先定义Credentials目录的绝对路径：

:: 在每个脚本开头添加（%~dp0表示当前脚本所在目录的绝对路径）
set "CredDir=%~dp0Credentials"
if not exist "%CredDir%" mkdir "%CredDir%"

然后将所有Credentials\xxx.txt替换为"%CredDir%\xxx.txt"，确保所有脚本操作的是同一个目录。

2. 批处理即时扩展特性导致变量未更新 #

批处理默认采用即时扩展，即脚本执行前会一次性解析所有%变量%并替换为初始值。main.bat中的net user administrator "%AdminPass%"在脚本启动时就被解析为net user administrator ""（因为初始AdminPass为空），即便后续循环中变量被赋值，执行时依然会用空值。

解决方法：
启用延迟扩展，在main.bat开头添加：

@echo off
setlocal enabledelayedexpansion

然后将变量引用从%AdminPass%改为!AdminPass!：

net user administrator "!AdminPass!"

3. 特殊字符导致文件写入异常 #

如果AdminPass包含&、|、>等特殊字符，echo=%AdminPass%会被批处理解析为命令，导致文件内容异常，读取后变量值错误甚至为空。

解决方法：
使用set /p命令写入文件，避免特殊字符被解析：

:: 替换CreateAdminCreds.bat中的写入代码
set /p="%AdminUser%" > "%CredDir%\AdminUser.txt" <nul
set /p="%AdminPass%" > "%CredDir%\AdminPass.txt" <nul

内容的提问来源于stack exchange，提问作者tjordan