How do I add a domain group to a local group via wmi? (remotely)

> Bruce D. Meyer wrote:
>

> > I want to add a Domain 'ITSupport group' to the 'local admins group' so

> > members of this 'ITSupport group' can install software to local

> > This change would have to be made on all the computers in our forest

> > 1,000.) I don't 'think' this is something I can do with GPO, so my next
> > thought was to write a vbscript using WMI to do this.
> >
> > Before I invest a lot of time into this, can anyone state definitevely
> > wether this can or can not be done?
> >

> Hi,
>
> I would have done it in a GPO based computer startup script.
>
> The following command line will add the "ITSupport" domain
> group to the local group "Administrators" (replace mydomainname with
> your domain name):
>
> net.exe localgroup "Administrators" "mydomainname\ITSupport" /ADD
>
> Create a GPO based computer startup script that runs the command
> above.
>
> Computer startup script runs as part of the boot up process
> (before the user logs in) and it runs under the system context
> and has administrator rights.
>
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scr...r/default.mspx

> Thank you very much,
> So much to learn...
>
> --Bruce D. Meyer
>
>
> "Torgeir Bakken (MVP)" <Torgeir.Bakken-spam@hydro.com> wrote in message
> news:OLdjmk2vFHA.908@tk2msftngp13.phx.gbl...

>> Bruce D. Meyer wrote:
>>

>> > I want to add a Domain 'ITSupport group' to the 'local admins group' so

> the

>> > members of this 'ITSupport group' can install software to local

> machines.

>> > This change would have to be made on all the computers in our forest

> (about

>> > 1,000.) I don't 'think' this is something I can do with GPO, so my next
>> > thought was to write a vbscript using WMI to do this.
>> >
>> > Before I invest a lot of time into this, can anyone state definitevely
>> > wether this can or can not be done?
>> >

>> Hi,
>>
>> I would have done it in a GPO based computer startup script.
>>
>> The following command line will add the "ITSupport" domain
>> group to the local group "Administrators" (replace mydomainname with
>> your domain name):
>>
>> net.exe localgroup "Administrators" "mydomainname\ITSupport" /ADD
>>
>> Create a GPO based computer startup script that runs the command
>> above.
>>
>> Computer startup script runs as part of the boot up process
>> (before the user logs in) and it runs under the system context
>> and has administrator rights.
>>
>>
>>
>> --
>> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
>> Administration scripting examples and an ONLINE version of
>> the 1328 page Scripting Guide:
>> http://www.microsoft.com/technet/scr...r/default.mspx

>
>