Get group object using the group's SID

[MiV 0]

Hello everyone,

I don't know if this is really a AutoIt topic or more a COM topic - anyway, I have to add a user to a group with AutoIt, so I try it here...

If I try to get a group by name, it will fail if I have a different language version of the system. E.g. the code snippet

$objGroup = ObjGet("WinNT://" & $strComputer & "/Administrators,group")

will not give me the group object if I run it on a german language system, as the group name is 'Administratoren' there.

So I tried replacing the group name by the well known SID

$objGroup = ObjGet("WinNT://" & $strComputer & "/S-1-5-32-544,group")

but this did not give me a valid object either. I tried with various versions of the string specification (without ',group', separate strings,...) but no way. Searching Microsoft was also not a big help or maybe the solution is buried there deep in layers and layers of interfaces...

Does anyone know the trick?

Thanks MiV

[water 2,447]

I use the following code to translate well known SIDs to the respective account names.

; Get the language dependant well known accounts for SELF and EVERYONE
$aAD_Temp = _Security__LookupAccountSid("S-1-5-10")

[MiV 0]

Does this mean I will need all the mentioned UDF's (AD, Outlook, Excel) to accomplish the task?

Thanks

[water 2,447]

No. To run the above mentioned function you only need "#include <Security.au3>" in your script.

[MiV 0]

Thank you. That did the trick.

[water 2,447]