If not Ingroup("\\@WKSTA\Administrators")
Shell "net localgroup administrators /add @userid"
EndIf
however, if they are in a group, and the group is in administrators, it will not add the userid, as they are already in there.
You need to enumerate the membership of the administrators group and see if one of the items is userid...
or remove the group
