Hello,
I'm trying to write a few scripts to help automate some Windows
administration tasks. One of these is to add people to groups on
different networked machines.
I've written something like the following:
<?php
$computer = "TestComputer";
$groupName = "TestGroup";
$server_config = array('Server' => TestComputer' , 'Username' =>
'TestUser' , 'Password' => 'TestPass');
// list all current group members
$domainObject = new
COM("WinNT://".$computer."/".$groupName.",group",$server_config) or
die("Cannot create COM object");
foreach ($domainObject->Members as $var)
{
echo $var->Name."<br>";
}
// add person to group
$usertoadd = "APerson";
$domainUser = new
COM("WinNT://DOMAIN/".$usertoadd.",user",$server_config) or die("Cannot
create COM object ");
$domainObject->Add($domainUser->ADsPath);
?>
TestUser is a local administrative account on TestComputer.
If I run apache using the standard local system account, the code lists
the members of the group but refuses to add APerson. If I run apache
with a domain administrator account it works fine, but I don't want to
do this - I want to be able to pass the username and password of an
account on the target machine that has permissions set up for this
purpose.
I've tried making changes using dcomcnfg on the target machine, but no
luck so far.
Does anyone have any experience in using COM functions and can spot
anything I'm doing wrong or a misunderstanding in how it works?
Thanks,
Jon
---------
This e-mail does not reflect the views or opinions of Travellers Tales
(UK) Ltd or any other related TT Games group company.
