You are welcome. We don't use MDT but these scripts work best with the ad user you are running them as in the local admin group of that machine.
We add the SCCM user at the start of the task sequence and remove it at the end. From: [email protected] [mailto:[email protected]] On Behalf Of Murray, Mike Sent: Tuesday, June 21, 2016 12:43 PM To: [email protected] Subject: [mssms] RE: VB Script to add user to security group during imaging? I really appreciate your help! I was able to simplify this, I believe. I haven't tested in OSD just yet, but it works running locally. Param ( [Parameter(Mandatory = $true, HelpMessage = "AD Group (distingiushedname)", Position = 0)] [string]$ADGroup, [Parameter(Mandatory = $true, HelpMessage = "User Sammacount", Position = 1)] [string]$userName ) Add-ADGroupMember -Identity $ADGroup -Members $userName From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Jerousek, Jeff Sent: Monday, June 20, 2016 11:27 AM To: [email protected]<mailto:[email protected]> Subject: [mssms] RE: VB Script to add user to security group during imaging? It should if you do something like this: Param ( [Parameter(Mandatory = $true, HelpMessage = "AD Group (distingiushedname)", Position = 0)] [string]$ADGroup, [Parameter(Mandatory = $true, HelpMessage = "User Sammacount" Position = 1)] [string]$userName ) $search.Filter = "(sAMAccountName=$userName)" Then call it with something like powershell.exe .\scriptName.ps1 -Adgroup %TSVar% -userName %TSVar2% Thanks, Jeff Jerousek<mailto:[email protected]> From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Murray, Mike Sent: Monday, June 20, 2016 11:44 AM To: [email protected]<mailto:[email protected]> Subject: [mssms] RE: VB Script to add user to security group during imaging? I need this to be able to read in the user name from a task sequence variable. Will this do that? From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Jerousek, Jeff Sent: Monday, June 20, 2016 9:32 AM To: [email protected]<mailto:[email protected]> Subject: [mssms] RE: VB Script to add user to security group during imaging? Here is PS script that I use: Param ( [Parameter(Mandatory = $true, HelpMessage = "AD Group (distingiushedname)", Position = 0)] [string]$ADGroup ) #Distinguished Name of group $name = $ADGroup #Get Domain $domain = [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain() $root = $domain.GetDirectoryEntry() #Find user in Domain $search = [System.DirectoryServices.DirectorySearcher]$root $search.Filter = "(sAMAccountName=$env:USERNAME)" $result = $search.FindOne() $user = [ADSI]$result.path #Set Group Name $Ldap = "LDAP://" + $name [ADSI]$group = $LDAP #Add Computer to Named Group $group.psbase.Invoke("Add",$user.psbase.path) Thanks, Jeff Jerousek<mailto:[email protected]> From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Murray, Mike Sent: Monday, June 20, 2016 10:54 AM To: [email protected]<mailto:[email protected]> Subject: [mssms] RE: VB Script to add user to security group during imaging? :bump: From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Murray, Mike Sent: Thursday, June 16, 2016 4:26 PM To: [email protected]<mailto:[email protected]> Subject: [mssms] VB Script to add user to security group during imaging? Hey folks, I have the script below that adds the *computer* account to a security group via "CSCRIPT.EXE AddGroup.vbs "Group Name". Could someone help me modify it to add a user to the same group? The user would be a task sequence variable (OSDUser or whatever). Thanks in advance! Const ADS_PROPERTY_APPEND = 3 Set WshShell = WScript.CreateObject("WScript.Shell") '----Get Computer DN------ Set objADSysInfo = CreateObject("ADSystemInfo") ComputerDN = objADSysInfo.ComputerName strcomputerdn = "LDAP://" & computerDN Set objADSysInfo = Nothing '----Connect AD----- Set oRoot = GetObject("LDAP://rootDSE") strDomainPath = oRoot.Get("defaultNamingContext") Set oConnection = CreateObject("ADODB.Connection") oConnection.Provider = "ADsDSOObject" oConnection.Open "Active Directory Provider" Count = WScript.Arguments.Count For i = 0 To count-1 Group = WScript.Arguments(i) Addgroup Group Next '----Get Group DN------ Function Addgroup(groupname) Set oRs = oConnection.Execute("SELECT adspath FROM 'LDAP://" & strDomainPath & "'" & "WHERE objectCategory='group' AND " & "Name='" & GroupName & "'") If Not oRs.EOF Then strAdsPath = oRs("adspath") End If If IsEmpty(strAdsPath) = False Then Const ADS_SECURE_AUTHENTICATION = 1 Set objGroup = GetObject(stradspath) Set objComputer = GetObject(strComputerDN) If (objGroup.IsMember(objComputer.AdsPath) = False) Then objGroup.PutEx ADS_PROPERTY_APPEND, "member", Array(computerdn) objGroup.SetInfo End If End If End Function Best Regards, Mike Murray Desktop Management Coordinator - IT Support Services California State University, Chico 530.898.4357 [email protected]<mailto:[email protected]> Remember, Chico State will NEVER ask you for your password via email! For more information about recognizing phishing scam emails go to: http://www.csuchico.edu/isec/basics/spam-and-phishing.shtml
