I use @priv to check if the user have admin rights in order to execute the Superdat from McAfee. I created a Global Group "Admin WS" and added this group into the Local Group "Administrator". It is not working If I check with:

If UCASE("@Priv")="ADMIN"
$Selection = MessageBox($Msg1, $MsgTitle , 64 )
shell $SdatPath + $SdatName + " /silent /logfile " + $ReportPath + @wksta + ".log"
$LastAction="Ran $SdatPath$SdatName - Error: " + @error
Else
$Selection = MessageBox($Msg2 , $MsgTitle , 48)
$LastAction="Scan Engine has to be updated"
Endif

Any idea how I can make it work???

code:

---

If UCASE("@Priv")="ADMIN"
   $Msg1 = "Updating Anti-Virus" $MsgTitle = "Administrative Message" 
   MessageBox($Msg1, $MsgTitle , 64 )
   shell "%comspec%  /c  $SdatPath\$SdatName  /silent /logfile $ReportPath\@wksta.log"
   $LastAction="Ran $SdatPath$SdatName - Error: " + @error
Else
   MessageBox($Msg2 , $MsgTitle , 48)
   $LastAction="Scan Engine has to be updated"
Endif

---

------------------
BoxKite
FACTA NON VERBA

sorry maybe I wasn't clear in my first post.

The line --If UCASE("@Priv")="ADMIN"-- is the problem, because the user have to be admin on the DOMAIN, but I want to know a solution to test if the user has LOCAL admin rights.

So: How to test if a user have LOCAL admin rights.

Thanks and Cheers from Belgium

code:

---

select 
	case ingroup("\\@wksta\Administrators") = 0
		? "@userid is not a local admin on @wksta"
	case ingroup("\\@wksta\Administrators") = 2
		? "@userid has local admin rights on @wksta"
endselect

---

Bryce

OK, gottcha, local admin

Houston, we have a problem

The information to make this work is maintained in the SAM in the registry. NT will not allow you to use Kix functions ENUMKEY or ENUMVALUE to read the SAM.

Hopefully the solution offered by Bryce will meet your needs.

I was doubting if I saw your solution, because my users are not member of the local group "Administrators" but member of the global group "Local Admin WS" which is itself member of the local group "Administrators".

So, actualy what I wanted to say is, that even if the user is bidirect member: YOUR SCRIPT IS WORKING

Thanks a lot - this problem kept me busy for a few days.

Cheers,
Mario