Add User from other domain to local admins

[stoffmann]

Hello,

i have a vbscript that does what i need. I looks like this.

Dim DomainName
Dim UserAccount
Set net = WScript.CreateObject("WScript.Network")
local = net.ComputerName
UserAccount = "ww900/Teamgroup"


set group = GetObject("WinNT://"& local &"/Administrators")

on error resume next
group.Add "WinNT://"&  UserAccount &""
CheckError

sub CheckError
    if not err.number=0 then
    set ole = CreateObject("ole.err")
    WScript.echo ole.oleError(err.Number), vbCritical
    err.clear
else
    WScript.echo "Done."
end if
end sub

I've tried to translate this to AutoIt and ended up with this (found in the forum)

Dim $UserGroup, $UserName

$UserGroup = "administrators"
$UserName = "ww900/Teamgroup"

;Add User to group 
$objGroup = ObjGet("WinNT://" & @ComputerName & "/" & $UserGroup & ",group")
$objUser = ObjGet("WinNT://" & $UserName & ",user")
If Not $objGroup.IsMember($objUser.AdsPath) Then
    $objGroup.Add ($objUser.AdsPath)
    ConsoleWrite("User added")
Else
    ConsoleWrite("Failed to add user")
EndIf

The AutoIt code works if i the user is in the same domain as the computer, but not if the user is from an other domain.

What am i doing wrong?

I found this but i have no idea

on how to use this script works.

Thank's in advance

Stefan

[water]

Just a shot in the dark but I think you'll have to add the domain where you want to search for the user. Something like:

$objUser = ObjGet("WinNT://" & $Domain "\" & $UserName & ",user")

[stoffmann]

Just a shot in the dark but I think you'll have to add the domain where you want to search for the user. Something like:

$objUser = ObjGet("WinNT://" & $Domain "\" & $UserName & ",user")

Thank's for the hint, but i allready have the domain in the variable $UserName = "ww900/Teamgroup".

[water]

Ahhh, I see.

I don't know if that makes a difference but usually I use a backslash between domain and username e.g. $UserName = "ww900\Teamgroup".

[spudw2k]

Are you aware of there being domain trusts in place? Can you currently perform cross domain authentication?

[stoffmann]

Ahhh, I see.

I don't know if that makes a difference but usually I use a backslash between domain and username e.g. $UserName = "ww900\Teamgroup".

You're right, backslash is the normal syntax.I tried both variants in the AutoIt script. The VBScript works with the slash.

Thanks

[stoffmann]

Are you aware of there being domain trusts in place? Can you currently perform cross domain authentication?

The domains are trusted. As i said, the vbscript doing the same (as far es i can see) works.

Thank You