Teh Tech » Visual Basic Script (vbs)

How to Add and Remove a Local Account from a Group

admin — Tue, 27 Apr 2010 20:35:25 +0000

Occasionally you may need to add a local user account to the local administrators group for a software install or temporary maintenance. The following vbs script can be used to add the local â€˜user1â€™ account to the local â€˜administratorsâ€™ group. Any user can be added to any local group, change the red to match your needs. The computer name is pulled from the workstation dynamically so this is also completely portable and can be run on any computer.

Dim objComputer, objWSHNetwork, strComputerName, objUser, objGroup
Set objWSHNetwork = WScript.CreateObject(“WScript.Network”)
strComputerName = objWSHNetwork.ComputerName
Set objComputer = GetObject(“WinNT://” & strComputerName)
Set objGroup = GetObject(“WinNT://” & strComputerName & “/Administrators“)
Set objUser = GetObject(“WinNT://” & strComputerName & “/user1“)
objGroup.Add(objUser.ADsPath)
objUser.SetInfo

To use this through Kaseya save the above as user1addadmin.vbs and upload it to the server:

Script Name: Add user1 to admin group
Script Description: Adds the local user1 account to the local admin group
IF True
THEN
Write File
Parameter 1 : c:\temp\user1addadmin.vbs
Parameter 2 : admin\VBS\user1addadmin.vbs
OS Type : 0
Execute File
Parameter 1 : c:\WINDOWS\system32\wscript.exe
Parameter 2 : c:\temp\user1addadmin.vbs
Parameter 3 : 3
OS Type : 0
ELSE

It might also come up that you may need to remove a user from a local group. The following one line batch file can be run as a login script, batch file or ran as a shell command. It will remove the local â€˜user1â€™ account from the local â€˜administratorsâ€™ group. Again this will work for any user account and any group.Â Just change the red to match your needs.

net localgroup administrators user1 /delete

Through Kaseya the following script would accomplish this:

Script Name: Remove the local user1 from admin group
Script Description: removes the local user1 account from the admin group.

IF True
THEN
Execute Shell Command
Parameter 1 : NET LOCALGROUP administrators user1 /delete
Parameter 2 : 1
OS Type : 0
ELSE

Add Command Prompt Here Context Menu

admin — Fri, 26 Mar 2010 15:53:04 +0000

Easy fast administration means less stress. This nifty script aims to save you some time.Â This adds the right click context menu to all folders in explorer ‘cmd prompt here’. When you click this option a command prompt with the current directory will be displayed. This is a very useful tool for administrative functions and saves you the time of opening a command prompt and changing directory to the folder you need. Additionally, it gives you aÂ really easy way to walk a user through openingÂ a command prompt window when you need them to run something like ipconfig over the phone. This is a visual basic script and runs silently, so it can be deployed by login script, or GPO as well as kaseya. Just save it as a .vbs.

Dim WSHShell
Set WSHShell = WScript.CreateObject(“WScript.Shell”)
WSHShell.RegWrite “HKCR\Folder\Shell\MenuText\Command\”, “cmd.exe /k cd ” & chr(34) & “%1″ & chr(34)
WSHShell.RegWrite “HKCR\Folder\Shell\MenuText\”, “Cmd Prompt Here”

For Kaseya, save the above as cmd_here.vbs, and upload it to the server. Import this script and change the red location to match the location of the file on your server.

Script Name: cmd here
Script Description: Adds ‘cmd here’ to the context menu of explorer
IF True
THEN
Write File
Parameter 1 : c:\temp\cmd_here.vbs
Parameter 2 : admin\VBS\cmd_here.vbs
OS Type : 0
Execute File
Parameter 1 : c:\WINDOWS\system32\wscript.exe
Parameter 2 : c:\temp\cmd_here.vbs
Parameter 3 : 3
OS Type : 0
ELSE

Make a Local User Account With VBS

admin — Thu, 18 Mar 2010 16:16:30 +0000

I deployed a bunch of new computers to a network using terminal services. Since the real authentication is at the server we standardize the local computer login to the username user1 and the password user1, just to keep things simple.Â Â SoÂ I needed a easy way to create this account locally on 30+ workstations. Here is whatÂ I came up with:

Option Explicit
‘ On Error Resume Next

Dim objComputer, objGroup, objUser, objWSHNetwork, strComputerName, FullName, Password, UserName, lngFlag
Const ADS_UF_DONT_EXPIRE_PASSWD = &H10000
Const ADS_UF_PASSWD_CANT_CHANGE = &H40
Set objWSHNetwork = WScript.CreateObject(“WScript.Network”)
strComputerName = objWSHNetwork.ComputerName
Set objComputer = GetObject(“WinNT://” & strComputerName)
Set objGroup = GetObject(“WinNT://” & strComputerName & “/Users”)

UserName = “user1”
FullName = “user1”
Password = “user1”

Set objUser = objComputer.Create(“User“, UserName)
objUser.SetPassword Password
objUser.FullName = FullName
objUser.SetInfo
objGroup.Add “WinNT://” & strComputerName & “/” & UserName

lngFlag = objUser.Get(“UserFlags”)
lngFlag = lngFlag Or ADS_UF_DONT_EXPIRE_PASSWD
objUser.Put “UserFlags”, lngFlag

lngFlag = objUser.Get(“UserFlags”)
lngFlag = lngFlag Or ADS_UF_PASSWD_CANT_CHANGE
objUser.Put “UserFlags”, lngFlag

objUser.SetInfo
objUser.SetInfo

What this does is it creats a user account on the local computer feel free to change the red values to fit your needs. Â It also flags the password as user cannot change and never expires. Â These sections of code (marked in purple) can be removed to fit your needs. Â Remember visual basic scripts are hangled by wscript.exe usually found in c:windowssystem32wscript.exe. Be sure to point the script to this if you are using it as a login script or pusing it through a third party application like kaseya.

here is a example of this being used in kaseya, copy the script, edit it to your needs, save it as user1.vbs, adn put it on the kaseya server. Run it an vola, user account across a network.

Script Name: User Account Creation
Script Description: Creats an account called user1 with the password user1 and sets it to never expire and user cannot change.Â Â

IF True
THEN
Write File
Parameter 1 : c:tempuser1.vbs
Parameter 2 : adminVBSadmin.vbs
OS Type : 0
Execute File
Parameter 1 : c:WINDOWSsystem32wscript.exe
Parameter 2 : c:tempuser1.vbs
Parameter 3 : 3
OS Type : 0
ELSE

Hope this helps, it took me a while toÂ develop.

Reset a Local Account Password With VBS

admin — Thu, 11 Mar 2010 15:25:03 +0000

Today I added a bunch of old computers with different local admin account passwords to our domain.Â So, since I am all for doing things the easy way I came up with a quick script.Â I added the computers that I needed the admin account reset on to an active directory OU and applied this script.

Option Explicit
‘ On Error Resume Next
Dim objComputer, objWSHNetwork, strComputerName, objUser
Set objWSHNetwork = WScript.CreateObject(“WScript.Network”)
strComputerName = objWSHNetwork.ComputerName
Set objComputer = GetObject(“WinNT://” & strComputerName)
Set objUser = GetObject(“WinNT://” & strComputerName & “/accountname, user”)
objUser.SetPassword “password”
objUser.SetInfo

If you would like to use this with Kaseya all you have to do is copy the above script name and name it password.vbs. Change the variables to meet your needs and then upload it to the server.Â Then just import the script below and change the path of the password.vbs to match the path of your file.

Script Name: Password Reset
Script Description: This resets an account password to a password of your choice with no intervention from the user.
THEN
Write File
Parameter 1 : c:temppassword.vbs
Parameter 2 : adminVBSpassword.vbs
OS Type : 0
Execute File
Parameter 1 : c:WINDOWSsystem32wscript.exe
Parameter 2 : c:temppassword.vbs
Parameter 3 : 3
OS Type :

This script pulls the computer name from the computer so it is completely portable.Â This can also be used to reset any local accounts not just admin accounts and can be pushed through active directory or another script management application like Kaseya or n-able.Â Remember that wscript.exe is what handles .vbs in windows, so be sure to point the script to the right location (usually c:windowssystem32wscript32.exe).Â Just change the above accountname to match the account you wish to reset and insert the password you wish to set it to.