;**************************************************

;*** Check if domain group is in local group

;**************************************************

$grouptoadd = @DOMAIN + "\Domain Users"

$obj = GetObject("WinNT://" + @WKSTA + "/Power Users")

$obj.filter = "group",""



Dim $DomainGroups[0]

For Each $GroupObj In $Obj.Members

     If Split($groupobj.adspath,"/")[3] <> @WKSTA

          $DomainGroups[$i] = Split($groupobj.adspath,"/")[2] +"\" + Split($groupobj.adspath,"/")[3]

          $i = $i + 1

          ReDim preserve $DomainGroups[$i]

     EndIf

Next





;**************************************************

;*** If domain group is not in local group, add it

;**************************************************

If AScan($DomainGroups,$GroupToAdd) = -1

     ? $groupToAdd + " was not found in " + SubStr($obj.adspath,14,7) + "\" + SubStr($obj.adspath,22,18)

     $PdcName = @DOMAIN

     $ComputerName = @WKSTA

     $UserString = "Domain Users"

     $GroupString = "Power Users"

     ;? $PdcName + " " + $ComputerName + " " + $UserString + " " + $GroupString



     $GroupObj = GetObject("WinNT://" + $PdcName + "/" + $ComputerName + "/" + $GroupString)

     $GroupObj.Add ("WinNT://" + $PdcName + "/" + UserString)

     $DomainObj = ""

     $GroupObj = ""

     Exit 0

Else

     ? "Added " + $groupToAdd + " to " + SubStr($obj.adspath,14,7) + "\" + SubStr($obj.adspath,22,18)

EndIf

Quote:

---

This could and should all be done via admin scipts and not during login.

---

Well, since I am just the "help" and not the "boss" I can't make that decision. lol They want their NEW GUI login script and they want now. So, I must register the kixforms.dll before it tries to open the logon.kix/form - The only way I can do this is via a batch file which is run before the logon.kix runs. The 2000 boxes are locked down for the normal users, so regsvr32 will not work for them, unless they're access level is at least "Power Users" - So they want the domain group "Domain Users" added to the local machine "Power Users" group. Can this be done with Kix or not?

Also note, we are not running AD and these 2000 boxes will all be migrated with-in 3 weeks...

Break On

Dim $SO

$SO=SetOption('Explicit','On')

$SO=SetOption('NoVarsInStrings','On')

 

Dim $System,$Systems,$CloseFile,$Results,$Results1,$Results2,$Results3,$Status,$AddTo

$Systems=ReadFile('C:\REPORTS\PowerUsers.txt')

For Each $System in $Systems

  If $System

    $Results  = Join(wshpipe("ping " + $System + " -n 1",1),@CRLF)

    $Results1 = Split(Split($Results,":")[2],"=")[0]

    $Results2 = Split(Split($Results,"for")[1],":")[0]

    $Results3 = Split(Split($Results,"from")[1],":")[0]

    Select

      Case (SubStr($Results,20,3)="not")

        $Status=$System+'*'+'No DNS Entry'+'*'+'*' ; Not found in DNS

        ? $Status

      Case (SubStr($Results1,2,5)="bytes")

        $AddTo=AddToLocalAdmin($System,'Power Users','your domain','Domain Users')

        $Status=$System+'*'+'Online'+'*'+$Results3+' Add Group: ' + $AddTo

        ? $Status

      Case 1

        $Status=$System+'*'+'Offline'+'*'+$Results2 ; Has an IP in DNS

        ? $Status

    EndSelect

  EndIf

Next

  

Function WshPipe($ShellCMD, OPTIONAL $NoEcho)

  Dim $oExec, $Output

  $oExec = CreateObject("WScript.Shell").Exec($ShellCMD)

  If Not VarType($oExec)=9 $WshPipe="WScript.Shell Exec Unsupported" Exit 10 EndIf

  $Output = $oExec.StdOut.ReadAll + $oExec.StdErr.ReadAll

  If Not $NoEcho $Output Endif

  $WshPipe=Split(Join(Split($Output,CHR(13)),''),CHR(10))

  Exit($oExec.ExitCode)

EndFunction

 

Function ReadFile($file)

Dim $lf, $f, $_, $t

$lf=Chr(10)

$f=FreeFileHandle

$_=Open($f,$file)

  If @ERROR   Exit @ERROR   EndIf

  Do $t=$t+$lf+ReadLine($f) Until @ERROR

  $_=Close($f)

$ReadFile=Split(SubStr($t,2),$lf)

EndFunction

 

Function AddToLocalAdmin($Computer,$GroupToAddTo,$Domain,optional $GroupToAdd,optional $AccountToAdd)

  Dim $Group,$User,$Admin,$Err

  $Group   = GetObject('WinNT://' + $Computer +  '/' + $GroupToAddTo + ',group')

  If $GroupToAdd<>""

    $User  = GetObject('WinNT://' + $Domain + '/' + $GroupToAdd + ',group')

  EndIf

  If $AccountToAdd<>""

    $User  = GetObject('WinNT://' + $Domain + '/' + $AccountToAdd + ',user')

  EndIf

  $Group.Add($User.ADsPath)

  $Err = @ERROR

  $AddToLocalAdmin=$Err

EndFunction

 

Function fnCOMErr($lErr)

  If $lErr<0 $lErr=VAL("&"+Right(DecToHex($lErr),4)) EndIf

  Exit $lErr

EndFunction

Quote:

---

The best way is the cheapest and fastest

---