From 4b26fe07c7a788a688162691a87a7c7ce8d74b5d Mon Sep 17 00:00:00 2001 From: John Hammond Date: Sat, 28 May 2022 01:16:37 -0700 Subject: [PATCH] Added support for local admins being created across different remote hosts --- code/ad_schema.json | 12 +++++++++++- code/gen_ad.ps1 | 9 ++++++--- 2 files changed, 17 insertions(+), 4 deletions(-) diff --git a/code/ad_schema.json b/code/ad_schema.json index 323fcba..ec66f77 100644 --- a/code/ad_schema.json +++ b/code/ad_schema.json @@ -10,14 +10,24 @@ "users": [ { + "local_admin": ["ws01"], "name": "Alice Lice", - "password":"P@ssw0rd789", + "password":"bubbles", "groups": [ "Employees" ] }, { + "local_admin": ["ws02"], "name": "Bob Ob", + "password":"ashley", + "groups": [ + "Employees" + ] + }, + { + "local_admin": ["ws01", "ws02", "dc1"], + "name": "Charlie Harlie", "password":"P@ssw0rdABC", "groups": [ "Employees" diff --git a/code/gen_ad.ps1 b/code/gen_ad.ps1 index 585cc72..80df9de 100644 --- a/code/gen_ad.ps1 +++ b/code/gen_ad.ps1 @@ -47,10 +47,13 @@ function CreateADUser(){ } # Add to local admin as needed - if ( $userObject.local_admin -eq $True){ - net localgroup administrators $Global:Domain\$username /add + # if ( $userObject.local_admin -eq $True){ + # net localgroup administrators $Global:Domain\$username /add + # } + $add_command="net localgroup administrators $Global:Domain\$username /add" + foreach ($hostname in $userObject.local_admin){ + echo "Invoke-Command -Computer $hostname -ScriptBlock { $add_command }" | Invoke-Expression } - } function RemoveADUser(){