DVD Talk
batch to change members of local admin group? [Archive] - DVD Talk Forum
 
Best Sellers
1.
2.
3.
4.
5.
6.
7.
8.
The Longest Day
Buy: $54.99 $24.99
9.
10.
DVD Blowouts
1.
2.
3.
4.
5.
6.
7.
Alien [Blu-ray]
Buy: $19.99 $9.99
8.
9.
10.

PDA
DVD Reviews

View Full Version : batch to change members of local admin group?


twikoff
05-16-03, 09:18 AM
anyone know of a way to do a mass change of members in a local admin group.. actually, it would be better if we could just remove a specific group from the local admins group..
a former employee seems to have put the everyone group in as a local admin on the machines he setup.. and we didnt notice before.. but it appears to be causing a big virus issues (not to mention the security problems that would cause).. but there is no way of individually tracking down each machine he worked on, so I want to see about running a batch to change them all.
i know we can do alot of these types of tasks with hyena.. such as changing everyone's local admin pw at the same time.. but havent found a way to do members of the local admin group?

X
05-16-03, 09:41 AM
What OS?

You could use ADSI/WinNT routines in VBScript or JScript. Then centrally distribute to each workstation.

twikoff
05-16-03, 10:29 AM
if we could hit at least all the 2k machines, it would be fine
also getting nt4 machines would be great, but that would most likely be more difficult

X
05-16-03, 10:44 AM
Yeah, then you can do them all using WinNT calls on the workstation run from a script. You might have to add and register ADsSecurity.dll to the NT machines though.