addusers?

[zxarr]

Hi there. I know there is a tool that allows you to add a user into a Local or Global group; 'addusers.exe'. What I need is a tool that will remove a Global Group from a Local Group.

I work in a school board. Seems a tech has added the student groups as local administrators. This is bad. To remove them manually, that's easy, just time consuming.

Is there a command line utility that will --remotely-- remove a Global Group from the Local Administrators group on WinXP machines? We are running a W2K domain w/ AD.

Thanks.

 

[GeneralNerd]

The only way I can think of doing this is by using MMC and then add the Local users and groups snap-in for all of the machines. It's still alittle time consuming, but at least you don't have to visit each system.

 

[GlenJohnson]

rmuser [-f filename] user_name
The rmuser command removes the user account identified by the Name parameter. This command removes a user's attributes without removing the user's home directory and files. The user name must already exist as a string of 8 bytes or less. If the -p flag is specified, the rmuser command also removes passwords and other user authentication information from the /etc/security/passwd file.



Glen A. Johnson
"Fall seven times, stand up eight."
Proverb

Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884

 

[zxarr]

"rmuser [-f filename] user_name"

That would be a UNIX/LINUX command. While I run a Liunx Redhat box at home, we have a strict 2000 Server / XP Pro network.



I thought about adding all the machines into an MMC snapin.... I still don't want to do that. Heheh. But I may have to. :/

Thanks for the ideas...

 

[GeneralNerd]

I found this on Microsofts website.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/ScriptCenter/user/scrug51.asp

Removing a User from a Group

Script Code

Const ADS_PROPERTY_DELETE = 4

Set objGroup = GetObject _
("LDAP://cn=Sea-Users,cn=Users,dc=NA,dc=fabrikam,dc=com&quot

objGroup.PutEx ADS_PROPERTY_DELETE, _
"member", _
Array("cn=MyerKen,ou=Management,dc=NA,dc=fabrikam,dc=com&quot

objGroup.SetInfo

I don't know if you can do it remotely or not. I'm not much of a script writer.


Hope it is hopeful