I am trying to list all of the members of the local group Administrators on a NT workstation (brycetest) in a different domain(garts) then myself.

here is the code using the ADSI OpenDSObject method.

code:

---

$group = GetObject("WinNT:").OpenDSObject("WinNT://garts/brycetest/administrators", "garts\<userid>", "<password>", 1)
? "@error:@serror"
for each $member in $group.members
	? $member.name
	? "@error:@serror"
next
? "@error:@serror"

---

Using the OpenDSObject I am only able to show local accounts that are in the Administrators not any of the domain accounts.

Using the following method I am able to display all members of Administrators.

code:

---

use "\\brycetest\ipc$$" /user:'garts\<username>' /password:<password>
$group = GetObject("WinNT://garts/brycetest/administrators")
? "@error:@serror"
for each $member in $group.members
	? $member.name
	? "@error:@serror"
next
use "\\brycetest\ipc$$" /d

---

I am at a loss....

Bryce

[ 07 September 2001: Message edited by: Bryce ]

Hmmm.. Hmmm... Hmmm..

I just tried it here and works great for querying a machine across to another domain. Are both of these Domain controlled by 2000 PDCs? And I am going to assume that you are a Domain Admin on Both Domains and you have Administrative Access to the box you are querying and the one that you are initiating the query from..

I made some tweaks with your code, but should be the same..

code:

---

break on cls
$OtherDomain = "Garts"
$AdminID = "bryce"
$AdminPass = "<password>"
$WkstatoQuery = "brycetest"
use "\\$OtherDomain\ipc$$" /user:'$OtherDomain\$AdminID' /password:$AdminPass
$group = GetObject("WinNT://$OtherDomain/$WkstatoQuery/administrators")
? "@error:@serror"
for each $member in $group.members
	? $member.name
	? "@error:@serror"
next
use "\\$WkstatoQuery\ipc$$" /d

---

Thanks!

- Kent

Both Domains are NT4.0

I was really wanting to use the OpenDSObject method also.

Bryce

i am beginning to get the feeling that the ADSI WinNT: provider wasn't given as much attention as perhaps the LDAP provider.

which is somewhat understandable as i understood that it isn't microsoft's primary goal to support NT4, they'd probably rather see you implement 2k/XP with Active Directory.

see also Flaw in enumerating properties.

quite annoying.