I'm trying to find out if there is a way to add the "Domain Users" groups from multiple domains into the local "Users" group on all of my NT 4.0 workstations.

Background on this:
In preparation for rolling out SMS 2003, I need to ensure that all of the "Domain Users" groups from our multiple domains are added to the local "Users" group on all of our NT 4.0 machines. This job would be run from SMS, so it will already have local admin rights on the machine. What I'm looking for is something like this:

Check local users group for:
DomainA\Domain Users
DomainB\Domain Users
DomainC\Domain Users

If the Global Group is not in the local group, add it in.

Again, this won't be running from a login script, it will be pushed out through our current SMS 2.0 environment.


Any help?

Edited by troyman (2004-07-06 09:32 PM)