is domain user a local admin?

Hi!

How can I write script to realize if the current (domain or local) is a
member of local "Administrators" group?

The problem is that it can be member of Admins group indirectly:

User --> Domain Admins --> Administrators
User --> IT Staff --> WS Admins --> Administrators

Script will be run locally on client computer as a startup script

Any ideas?

Thanks

Hi Alexey,


Try this vbscript, it recurses all group memebers of the local admin group:

-----------------
DomainUser = "DomainUserName"

Set objLocalGroup = GetObject("WinNT://./Administrators,group")

ProcessGroup objLocalGroup

Sub ProcessGroup(objGroup)

For Each objMember In objGroup.Members

If (LCase(objMember.Class) = "group") Then
Call ProcessGroup(objMember)
End If


if objMember.Name = DomainUser then
wscript.echo objMember.Name & " is local admin"
wscript.quit
end if
Next

End Sub

------------------


You can also use NET.exe:

net localgroup Administrators | find /i "Domain\UserName"


---
Shay Levi
$cript Fanatic
http://scriptolog.blogspot.com

> Hi!
>
> How can I write script to realize if the current (domain or local) is
> a member of local "Administrators" group?
>
> The problem is that it can be member of Admins group indirectly:
>
> User --> Domain Admins --> Administrators
> User --> IT Staff --> WS Admins --> Administrators
> Script will be run locally on client computer as a startup script
>
> Any ideas?
>
> Thanks
>

Alexey Vorobyev wrote:

>
> How can I write script to realize if the current (domain or local) is a
> member of local "Administrators" group?
>
> The problem is that it can be member of Admins group indirectly:
>
> User --> Domain Admins --> Administrators
> User --> IT Staff --> WS Admins --> Administrators
>
> Script will be run locally on client computer as a startup script
>
> Any ideas?

I have an example VBScript program to check if a user is a member of any
local group, like administrators. Besides nested local groups, the program
also checks for nested domain groups. This requires switching from the WinNT
provider to the LDAP provider.

http://www.rlmueller.net/IsMember9.htm

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--