Hi Shawn

Thanks for your respone. Was in vacation for two weeks (had to recover my mind ;-)) and work now on the same problem again. In the meantime I have tested the Microsoft Solution in VBS, and the scripts works so far, as long as the machine has been joined to the domain already. My biggest problem at the moment is, how to access ADSI object via LDAP as long as the machine is NOT joined to the domain. For example: the command
code:
 $RootDSW = GetObject("LDAP://RootDSE")
works only, when the machine already belongs to the domain. Otherwise the script will fail. Anyway, I have to find a solution and will update the group with news on that problem.

Cheers,
Jörg