Couldn't you just add the "Authenticated users" group to the local 
administrators group ?



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Burke, John
Sent: December 5, 2014 10:31 AM
To: scripting@lists.myITforum.com
Subject: [scripting] Odd script request - something I can push via sccm that 
will add all the user profiles that logged in to local admin
Importance: High

I have a script that is working but the delimitation is mucking it up.  It 
works if you have just your domain\userid in the profile list in registry. But 
if you have domain\userdid.domain it bombs because of the ..

Wondering if anyone would be able to look at it and see a simle change i can 
make to make it work properly (or maybe there is a better way to do it. Even if 
i had something that i could run on a standard user, that would add the 
currently logged in user to local admin via sccm that would wrok too).


**** it's pretty small script ****
On Error Resume Next

Const HKEY_LOCAL_MACHINE = &H80000002

strComputer = "."

Set objRegistry=GetObject("winmgmts:\\" & _
    strComputer & "\root\default:StdRegProv")

strKeyPath = "SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList"
objRegistry.EnumKey HKEY_LOCAL_MACHINE, strKeyPath, arrSubkeys

For Each objSubkey In arrSubkeys
    strValueName = "ProfileImagePath"
    strSubPath = strKeyPath & "\" & objSubkey
    objRegistry.GetExpandedStringValue 
HKEY_LOCAL_MACHINE,strSubPath,strValueName,strValue
    profilearray = Split(strvalue,"\")
    For Each x In profilearray
     UserID=x
    Next
    Set objLocalAdminGroup = GetObject("WinNT://" & strComputer & 
"/Administrators")
 objLocalAdminGroup.Add("WinNT://domain1/" & UserID)
 objLocalAdminGroup.Add("WinNT://domain2/" & UserID)
Next




Reply via email to