Was thinking that this would be a job for any old NT5 workstation, ADSI and the WinNT provider, for example, to enumerate remote objects in the local administrators group on a workstation:

break on

$WKSTA = "xxxyyy" ; the target machine
$ADMINID = "john.doe" ; local or domain\account
$ADMINPWD = "password" ; password
$LOCALGROUP = "administrators" ; the local group on target machine

$root = getobject("WinNT:")

$group = $root.opendsobject("WinNT://$WKSTA/$LOCALGROUP","$ADMINID","$ADMINPWD",0)

for each $object in $group.members
 ? $object.adspath
next

exit 1


Haven't been able to successfull enumerate GLOBAL DOMAIN GROUPS in there yet ... anyone ?