Adicionar/Remover usuario do grupo local Administrators

Esse script powershell  tem a função de Adicionar ou Remover um usuário do grupo local Administrators.

A lista de máquinas fica localizada no arquivo C:\Scripts\maquinas.txt.

Para remover um usuário, comente a linha $Group.Add e a seguinte.

Para adicionar um usuário, comente a linha $Group.Remove e a seguinte.

$domain = “dominio”
$username = “usuario”

foreach ($strComputer in Get-Content “C:\Scripts\maquinas.txt”)
{$strComputer + “`n” + “==========================”
$computer = [ADSI](“WinNT://” + $strComputer + “,computer”)
$computer.name

$Group = $computer.psbase.children.find(“administrators”)
$Group.name

# This will list what’s currently in Administrator Group so you can verify the result

function ListAdministrators

{$members= $Group.psbase.invoke(“Members”) | %{$_.GetType().InvokeMember(“Name”, ‘GetProperty’, $null, $_, $null)}
$members}
ListAdministrators

# Even though we are adding the AD account but we add it to local computer and so we will need to use WinNT: provider

$Group.Add(“WinNT://” + $domain + “/” + $username)

ListAdministrators

$Group.Remove(“WinNT://” + $domain + “/” + $username)

ListAdministrators
}