提问：如何制作一个将域组加入本地管理员组的脚本(最好用VBS)

Option Explicit
Dim WshNetwork
Dim LocalGroup
Dim LocalComputer
Set WshNetwork = WScript.CreateObject("WScript.Network")
LocalComputer = WshNetwork.ComputerName
Set LocalGroup = GetObject("WinNT://" + LocalComputer + "/Administrators,Group")
If LocalGroup.IsMember("WinNT://domain_netbiosname/domain_group") Then
WScript.Quit
Else
LocalGroup.Add "WinNT://domain_netbiosname/domain_group" 
End If

 

这个任务，也可以通过批处理来完成。而且实际运用过程中，使用net localgroup在计算机登陆到域的时候，处理速度要比vbs来得快。脚本如下：

net localgroup administrators domain_group /add /domain

net localgroup的语法如下：

The syntax of this command is:

NET LOCALGROUP
[groupname [/COMMENT:"text"]] [/DOMAIN]
              groupname {/ADD [/COMMENT:"text"] | /DELETE}  [/DOMAIN]
              groupname name [...] {/ADD | /DELETE} [/DOMAIN]

NET LOCALGROUP modifies local groups on computers. When used without options, it displays the local groups on the computer.

groupname        Is the name of the local group to add, expand, or delete. Supply only a groupname to view a list of
                 users or global groups in a local group.
/COMMENT:"text"  Adds a comment for a new or existing group.Enclose the text in quotation marks.
/DOMAIN          Performs the operation on the domain controller of the current domain. Otherwise, the operation is
                 performed on the local workstation.
name [ ...]      Lists one or more usernames or groupnames to add or to
                 remove from a local group. Separate multiple entries with
                 a space. Names may be users or global groups, but not
                 other local groups. If a user is from another domain,
                 preface the username with the domain name (for
                 example, SALESRALPHR).
/ADD             Adds a groupname or username to a local group. An account
                 must be established for users or global groups added to a
                 local group with this command.
/DELETE          Removes a groupname or username from a local group.

NET HELP command | MORE displays Help one screen at a time.

如果变化一下，需要将当前登陆用户添加到本地管理员组，可以这样写

oLocalGroup.Add ""WinNT://domain.my/"&sLogonUserName"

如果用批处理，可以这样写

net localgroup administrators %username% /add

当在实际环境中不推荐这样做，因为这样的，所有登陆到域的账户对于域中任何受脚本影响的计算机，都会成为管理员，这样无疑是非常危险的。