DVD Talk
batch to change members of local admin group? [Archive] - DVD Talk Forum


View Full Version : batch to change members of local admin group?

05-16-03, 09:18 AM
anyone know of a way to do a mass change of members in a local admin group.. actually, it would be better if we could just remove a specific group from the local admins group..
a former employee seems to have put the everyone group in as a local admin on the machines he setup.. and we didnt notice before.. but it appears to be causing a big virus issues (not to mention the security problems that would cause).. but there is no way of individually tracking down each machine he worked on, so I want to see about running a batch to change them all.
i know we can do alot of these types of tasks with hyena.. such as changing everyone's local admin pw at the same time.. but havent found a way to do members of the local admin group?

05-16-03, 09:41 AM
What OS?

You could use ADSI/WinNT routines in VBScript or JScript. Then centrally distribute to each workstation.

05-16-03, 10:29 AM
if we could hit at least all the 2k machines, it would be fine
also getting nt4 machines would be great, but that would most likely be more difficult

05-16-03, 10:44 AM
Yeah, then you can do them all using WinNT calls on the workstation run from a script. You might have to add and register ADsSecurity.dll to the NT machines though.

Content Relevant URLs by vBSEO 3.2.0