Admin Mod

Import-Module activedirectory

$ErrorActionPreference = "Continue"

Write-Host "Checking if log folder exists and making it if not"
$Path = "C:\PowerShell Logs"
If (!(Test-Path -Path $Path ))
{
    New-Item -ItemType Directory -Path $Path
}
Else
{
    Write-Host "Folder exists, proceeding with script execution"
}

$Date = Get-Date -format MM.dd.yyyy

$Comp = Read-Host "Please define a computer"
$OU = Read-Host "Please define an OU"
$askNoGPI = Read-Host "Are the computers under the No GP Inheritance OU? (y/n)"

$baseAD = "OU=Computers,OU=Test,DC=domain,DC=com"
$Date = Get-Date -format MM.dd.yyyy

$Comp = Read-Host "Please define a computer"
$OU = Read-Host "Please define an OU"
$askNoGPI = Read-Host "Are the computers under the No GP Inheritance OU? (y/n)"

$searchbase = $baseAD

if ($askNoGPI -eq 'y') { $searchbase = "OU=No GP Inheritence,$searchbase" }
if ($OU) { $searchbase = "OU=$OU,$searchbase" }
if ($Comp) { $searchbase = "CN=$Comp,$searchbase" }

$query = Get-ADComputer -Filter * -SearchBase $searchbase | Select Name | Sort Name
$computers = $query.Name

$LocalAdminPassword = Read-Host -AsSecureString "Please set the new local admin password"
$LocalUserPassword = Read-Host -AsSecureString "Please set the new local user password"
$LocalAdminPW = [Runtime.InteropServices.Marshal]::PtrToStringAuto([Runtime.InteropServices.Marshal]::SecureStringToBSTR($LocalAdminPassword))
$LocalUserPW = [Runtime.InteropServices.Marshal]::PtrToStringAuto([Runtime.InteropServices.Marshal]::SecureStringToBSTR($LocalUserPassword))

foreach ($computer in $computers)
{
    Write-Host "Connecting..."
    If(Test-Connection $computer -Count 1 -Quiet) #Check that PC is online
    {
        Write-Host "Changing local admin password on $computer"
        $LocalAdmin = [adsi]"WinNT://$computer/Administrator,user"
        $LocalAdmin.SetPassword($LocalAdminPW)
        $LocalAdmin.SetInfo()
        $LocalAdmin.InvokeSet("UserFlags",($LocalAdmin.UserFlags[0] -BOR 2))
        $LocalAdmin.SetInfo()
        Write-Host "Local admin password is set and account disabled"
        $LocalComputer = ([adsi]"WinNT://$computer,computer")
        $LocalComputerUsers = ($LocalComputer.psbase.children | Where-Object {$_.psBase.schemaClassName -eq "User"} | Select-Object -expand Name)
        $LCUFound = $LocalComputerUsers -contains "AG"
        $LocalUser = [adsi]"WinNT://$computer/AG,user"
        If($LCUFound)
        {
        Write-Host "Local user already exists, setting password and user properties"
        $LocalUser.SetPassword($LocalUserPW)
        $LocalUser.InvokeSet("UserFlags",($LocalUser.UserFlags[0] -BXOR 2))
        $LocalUser.SetInfo()
        Write-Host "Local user modified and password set"
        }
        Else
        {
        Write-Host "New local admin does not exist, creating"
        $NewUser = "AG"
        $CreateLocalUser = $LocalComputer.Create('User', $NewUser)
        $CreateLocalUser.SetPassword($LocalUserPW)
        $CreateLocalUser.SetInfo()
        $LocalUser.InvokeSet("UserFlags",($LocalUser.UserFlags[0] -BXOR 2))
        $LocalUser.SetInfo()
        ([adsi]"WinNT://$computer/Administrators,group").Add("WinNT://$computer/AG")
        Write-Host "New user created, password set, and added to local admin group"
        }
    }
    else
    {
        $offline = $computer | Out-File -Append -noClobber -filePath "C:\PowerShell Logs\Offline Computers $Date.csv" -width 20
        Write-Host -ForegroundColor Red "Can't connect to $computer"
        $offline
        Write-Host "Added to offline log file for $Date"
    }
}
Write-Host "All offline computers have been written to a log file"
Write-Host "Opening log file..."
Invoke-Item "C:\PowerShell Logs\Offline Computers $Date.csv"