Powershell ADSI tricks

gistfile1.txt

# Add a domain user to a remote server local group, if your current user has admin over the remote machine
powershell -c ([ADSI]'WinNT://SERVER/Administrators,group').add('WinNT://DOMAIN/USER,user')

# Get all local groups on a remote server
powershell -c "([ADSI]'WinNT://SERVER,computer').psbase.children | where { $_.psbase.schemaClassName -eq 'group' } | foreach { ($_.name)[0]}"

# Find members of the local Administrators group on a remote server
powershell -c "$([ADSI]'WinNT://SERVER/Administrators,group').psbase.Invoke('Members') | foreach { $_.GetType().InvokeMember('ADspath', 'GetProperty', $null, $_, $null).Replace('WinNT://', '') }"

# Enable the local Administrator account on a remote server
powershell -c "$a=([ADSI]'WinNT://SERVER/Administrator,user');$a.UserFlags=2;$a.CommitChanges()"

# Disable the local Administrator account on a remote server
powershell -c "$a=([ADSI]'WinNT://SERVER/Administrator,user');$a.UserFlags=512;$a.CommitChanges()"

HEY THANKS HARMJ0Y, I needed this and stumbled upon you ;)

I also needed to stumble upon this, thanks :)

Found out how to do some of these earlier today but not all. Useful stuff thank you for sharing.

Stumbled here too - very handy. In addition to the 'local group' one, here is how to make the computer a variable:

$comp = "remotemachine"

$ADSIComputer = [ADSI]("WinNT://$comp,computer")
$ADSIComputer.psbase.children | where { $_.psbase.schemaClassName -eq 'group' } | foreach { ($_.name)[0]}