Posted On March 29, 2019

Add a Domain Group to Local Administrators Group

kimconnect 0 comments
blog.KimConnect.com >> Codes , Windows >> Add a Domain Group to Local Administrators Group
$checkGroup="Administrators"
$addMember="KIMCONNECT\Desktop Admins"

# Dynamic Credential
$who = whoami
	if ($who.substring($who.length-2, 2) -eq "-admin"){$username=$who;}
    else {$username=$who+"-admin";}
$password = Read-Host -Prompt "Input the password for account $username" -AsSecureString
#$password=convertto-securestring "PASSWORD" -AsPlainText -Force
$cred = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $username,$password

$servers=Read-Host -Prompt 'Please copy/paste servers list'
$servers= $servers -split '\r\n'
#$servers="localhost"

$servers | foreach {
    Invoke-command -Credential $cred -ComputerName $_ -ScriptBlock {
        
        Import-Module ActiveDirectory
        
        $person=$Args[0]
        $add=$Args[1]
        $targetGroup=$Args[2]
        $computer=$Args[3]
        "Invoked from $person and Running as: "+ (whoami)+" on target: "+(hostname)+"`n"
        
        $members=Get-LocalGroupMember -Name $targetGroup
        #$members = Get-ADGroupMember -Identity $Args[2] -Recursive | Select -ExpandProperty Name
        #net localgroup [string]$tGroup | select -Skip 6 | select -SkipLast 2
        #$groupMembers=(net localgroup $Args[2] | select -Skip 6 | select -SkipLast 2)
     
        if ($members.Name -contains $add){"$computer`: $add already exists in group $targetGroup`n";}
        else{
            "$Args[1] is not a member of group $targetGroup. It is now being added...`n"
            NET USER $add /ADD /Y
            NET LOCALGROUP $targetGroup $add /ADD /Y
            $members=Get-LocalGroupMember -Name $targetGroup
            }
        "$computer`: Group $targetGroup now has these members..."
        $members.Name

        # These lines only work in PowerShell 5.1
        #New-LocalUser $Args[1] -Password $Args[2] -FullName $Args[3] -Description $Args[4]
        #Add-LocalGroupMember -Group $Args[5] -Member $Args[1]
        
    } -Args $who,$addMember,$checkGroup,$_
}

Leave a Reply

Your email address will not be published. Required fields are marked *

Related Post

PowerShell: Creating Active Directory Accounts from CSV File

# User-input Variables $csvFile='C:\Users\rambo\Desktop\newUsers-finalized.csv' $newOu='CN=Users,DC=kimconnect,DC=com' $newCompany='KimConnect.com' $logFile="c:\temp\createActiveDirectoryAccounts-$(get-date -f yyyy-mm-dd-hh-mm-ss).txt" function createActiveDirectoryAccounts{ param( $csvFile, $newOu, $newCompany,…

Office 365 User Logon Instructions

How to Access Email via Outlook Web Access (OWA) Navigate to: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=d6f712e4-8e0b-c690-dcc7-3082fcfa3760&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638636475879321385.58dd735b-4862-46c7-8d7a-ae13e3f0226d&state=Dcs7FoAwCABBos_jYBIIH48TRVtLry_FbLcFANa0pNIyYMqurMPE7WDq7LKLRxjLicOVcOhl6GET59355qcRaZR8t_p-s_4 Input the provided…

Increase Windows Management Instrumentation Service Handle Quota Limit

WMI.ps1----------------------------------------------$config = gwmi -Class "__ProviderHostQuotaConfiguration" -Namespace root$config | select -Property * -ExcludeProperty __* | ft…