Add or remove AD groups to or from Local groups

Share |

Browse Library

Tags

Previous | Next | View all files | View Slideshow

Download

posted by Robert Burke

02-09-2011

Downloads: 540

File size: 1.1kB

Embed

Add or remove AD groups to or from Local groups

<#  
Name: remove-ad-group.ps1  
Objective: To read a list of computernames from a file and then if the identified  
group exists in the local administrators group remove it  
Date: 01/31/2011  
Email: rburke@rbconsulting.net 
#>  
#Name of user or group to be removed  
$userName = 'IS_Tier3'  
#Name of local group to remove user or group from  
$localGroupName = 'Administrators'  
#Variable that contains the contents of the servername list  
$c = Get-Content "c:\Servers.txt"  
#read each name and execute below script against each name in the list  
foreach ($comp in $c)  
{  
#Variable reassignment  
$computerName = $comp  
#This reads the local domain and prepends it to the USERID  
[string]$domainName = ([ADSI]'').name  
# We are providing a yes so that we are not prompted for each computer  
$confirm = "Y"  
if ($confirm -eq "Y") {  
([ADSI]"WinNT://$computerName/$localGroupName,group").remove("WinNT://$domainName/$userName")  
#We could output this to a file for future reference 
Write-Host "User $domainName\$userName has been removed from local group $localGroupName on computer $computerName."  
}  
} 