Setting "Log on as a service" and "Allow logon locally" with ADSI

powershell adsi
Robert MacLean picture Robert MacLean · Jun 1, 2009 · Viewed 11.1k times · Source

I am trying to create a powershell script to automate user creation which is working great using ADSI. However I need to set the following properties and I am not sure how (or if ADSI can even do this):

  • Log on as a service
  • Allow logon locally

Any ideas how to do this?

Answer

Robert MacLean picture Robert MacLean · Jun 2, 2009

The solution to working with GPO's in PowerShell is via a COM+ object called GPMgmt.GPM which is part of the Group Policy Management Console feature. The best article for information I could find on this is: http://technet.microsoft.com/en-us/magazine/cc162355.aspx

I have yet to be able to figure out how to set those specific values though.

Related questions

Get All local members and groups displayed together

So far I have the below script that works like a charm but that only list the members of the group "Administrators". As my servers might be german, french ... I have no guarantee that such group will exist with the …

Read More
Create local user with PowerShell (Windows Vista)

I've installed PowerShell recently and one of the first things I started looking for was how to create a new user. After looking for some time I still haven't found this. I have a little experience in bash on linux …

Read More
Getting AD Group Membership ADSI using PowerShell

I currently have ADSI code to get the groups a user is a part of: $searcher = [adsisearcher]"(samaccountname=$env:USERNAME)" $searcher.FindOne().Properties.memberof $adgroups = $User -Replace '^cn=([^,]+).+$', '$1' However, i am wanting to be able to …

Read More