Use PowerShell to Add Domain Users to a Local Group

re: Use PowerShell to Add Domain Users to a Local Group

Ed Wilson — Tue, 12 Jun 2012 13:52:31 GMT

@Jason this script does not handle credentials. It impersonates the logged on user. If you need to use alternate credentials then you will need to right click on PowerShell and use runas to supply the credentials required.

re: Use PowerShell to Add Domain Users to a Local Group

Jason — Mon, 11 Jun 2012 21:08:58 GMT

Does this work when you run the script as a local administrator account? How do credentials to access the AD get passed through?

re: Use PowerShell to Add Domain Users to a Local Group

Jim — Fri, 13 May 2011 13:39:05 GMT

I found the answer.

PS C:\Users\Administrator> $LocalGroup = "Administrators"

PS C:\Users\Administrator> $DomainGroup = "MY-ADMIN-GROUP"

PS C:\Users\Administrator> ([ADSI]"WinNT://./$LocalGroup,group").Add("WinNT://ads.iu.edu/$DomainGroup")

PS C:\Users\Administrator>

re: Use PowerShell to Add Domain Users to a Local Group

Jim — Wed, 27 Apr 2011 15:13:08 GMT

This isn't working for me. Any ideas?

PS C:\Users\Administrator> $LocalGroup = "Administrators"

PS C:\Users\Administrator> $DomainGroup = "MY-ADMIN-GROUP"

PS C:\Users\Administrator> $de = [ADSI]"WinNT://./$LocalGroup,group"

PS C:\Users\Administrator> $de.psbase.Invoke("Add",([ADSI]"WinNT://domain.company.com/$DomainGroup").path)

Exception calling "Invoke" with "2" argument(s): "Number of parameters specified does not match the expected number."

At line:1 char:18

+ $de.psbase.Invoke <<<< <"Add",([ADSI]"WinNT://domain.company.com/$DomainGroup").path)

+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException

+ FullyQualifiedErrorId : DotNetMethodTargetInvocation