SHOW:
|
|
- or go back to the newest paste.
| 1 | $propADComputers = Get-ADComputer -Filter * -SearchBase "Whatever you want" | |
| 2 | $name = Read-Host -AsSecureString "Enter the name of the non-built in admin you would like if required:" | |
| 3 | $password = Read-Host -AsSecureString "Enter the password of the non-built in admin account you would like if required:" | |
| 4 | foreach ($c in $propADComputers | Select-Object -ExpandProperty "Name") | |
| 5 | {
| |
| 6 | ||
| 7 | try{
| |
| 8 | ||
| 9 | #Start remote PSSession to PC | |
| 10 | Write-Host "Attempting to enter PSSession for $c..." | |
| 11 | Enter-PSSession $c | |
| 12 | Write-Host "Success!" | |
| 13 | ||
| 14 | #Local Built-In Admin Account & account information | |
| 15 | Write-Host "Fetching built-in admin account..." | |
| 16 | $builtinAdmin = Invoke-Command -ComputerName $c -ScriptBlock {Get-LocalUser | ? {$_.SID -like "*-500"}}
| |
| 17 | $name = ($builtinAdmin | Select-Object -ExpandProperty "Name").ToLower() | |
| 18 | $isEnabled = $builtinAdmin | Select-Object -ExpandProperty "Enabled" | |
| 19 | ||
| 20 | if($name -contains "$name"){
| |
| 21 | "Built-in account name is $name...let's change it" | |
| 22 | Invoke-Command -ComputerName $c -ScriptBlock {(Rename-LocalUser -Name $using:name -NewName "Administrator")
| |
| 23 | } | |
| 24 | if ($isEnabled -eq $True){
| |
| 25 | "Built-in account is enabled...let's disable it." | |
| 26 | #Need to run it again to get the new name | |
| 27 | $builtinAdmin = Invoke-Command -ComputerName $c -ScriptBlock {Get-LocalUser | ? {$_.SID -like "*-500"}}
| |
| 28 | Invoke-Command -ComputerName $c -ScriptBlock {Disable-LocalUser -Name $Using:builtinAdmin | Select-Object -ExpandProperty "Name"}
| |
| 29 | } | |
| 30 | Write-Host "Creating non built-in admin account..." | |
| 31 | Invoke-Command -ComputerName $c -ScriptBlock {
| |
| 32 | (New-LocalUser -Name $Using:name -Password $Using:password -PasswordNeverExpires), (Add-LocalGroupMember -Group "Administrators" -Member $Using:name) | |
| 33 | } | |
| 34 | } | |
| 35 | Exit-PSSession | |
| 36 | } | |
| 37 | catch{
| |
| 38 | Write-Host "Unable to enter PSSession to $c" | |
| 39 | } | |
| 40 | } | |
| 41 | ||
| 42 | ||
| 43 |
