Remote Administer Local Groups with PowerShell and WMI

Question

How do I administer local groups on a remote server with PowerShell and WMI? For example, I would like to add and remove domain AD groups from the "Remote Desktop Users" group.

This article provides a script for listing users while this article provides a bit more detail on the Get-WMIObject (GWMI) and Set-WMIObject (SWMI) cmdlets, however I'm unsure how to proceed with updating the group membership.

as a starting point for this type of question go to http://technet.microsoft.com/en-us/scriptcenter/bb410849.aspx. — tony roth, Oct 23 '12 at 14:44

score 3 · Accepted Answer · answered Oct 25 '12 at 15:24

3

ADSI is your friend

$server = "somesServer"
$domain = "someDomain
$group2add = "group2add"
$localGroup = [adsi]"WinNT://$server/administrators,group"
$domainGroup = [adsi]"WinNT://$domain/$group2add,group"
$localGroup.Add($domainGroup.path)

answered Oct 25 '12 at 15:24

Clayton

4,483
16
24

Ok thanks. I also worked out how to list the members from this: `$localmembers = @($localGroup.psbase.Invoke("Members")) $localmembers | foreach {$_.GetType().InvokeMember("AdsPath","GetProperty",$null,$_,$null)}` – PeterX Nov 08 '12 at 00:19

Remote Administer Local Groups with PowerShell and WMI

1 Answers1