Windows Server

lee · Guest

Cleaning up a new (to me) environment. I'm looking for a way to enumerate the
members of the Local Administrators group and then list the members of any
security groups in the Admin group by user name.
I've got a script to list the members but can't get the security
group listing (Like sql_dba members) and their names.

Thanks for any help you can provide.

Jerold Schulman · Guest

On Mon, 3 Jan 2005 12:35:05 -0800, lee <lee@discussions.microsoft.com> wrote:

lee · Guest

That gets me all the users, thanks. What do I need to add to take the lan
ID's to an actual user name? And run against a list of servers from one
central server?

Lee

"Jerold Schulman" wrote:

Jerold Schulman · Guest

It displays the User ID (sAMAccountName) when I run it.
Did you mean the distinguishedName?

To run it on remote servers or workstations, use PsExec, tip 4141 in the 'Tips & Tricks' at http://www.jsiinc.com

On Tue, 4 Jan 2005 12:17:03 -0800, lee <lee@discussions.microsoft.com> wrote:

lee · Guest

I apologize for not being clear Jerold. What I am hoping to get is the
'Display Name' value from the General tab of the User's property page. I
don't know if we can isolate that value or not.
Thanks for helping.

"Jerold Schulman" wrote:

Jerold Schulman · Guest

You can modify the script to display the displayName instead of the sAMAccountName for domain users, but not for local users.

It might be easier to run the following script:

@echo off
setlocal
for /f "Tokens=1* Delims=\" %%a in ('administrators.bat') do (
call :user "%%a" "%%b"
)
endlocal
goto :EOF
:user
set disp=NONE
set u1=%1
set u2=%2
set u1=%u1:"=%
set u2=%u2:"=%
set qry=dsquery * domainroot -filter "(&(objectCategory=Person)(sAMAccountName=%2))" -attr displayName -L
for /f "Tokens=*" %%u in ('%qry%') do (
set disp=%%u
)
@echo %u1%\%u2% %disp%

On Tue, 4 Jan 2005 13:37:08 -0800, lee <lee@discussions.microsoft.com> wrote:

	Windows Server Forum Index -> Programming	All times are GMT
Page 1 of 1