Hello Jordan,
Thank you very mutch. I had the same raissonement with a custom script.
Yesterday, i created a specifical script to ckeck a groups.
function Get-AdministratorsGroupName {
$LocalGroup = @('Administrators', 'Administrateurs', 'Domain Admins')
foreach ($Group in $LocalGroup){
Try{
if(([adsi]"WinNT://./$Group,group").psbase.Invoke('Members')){
return $Group
}
} catch {}
}
}
Get-AdministratorsGroupName
Regards
Le lundi 10 juillet 2017 22:41:57 UTC+2, Jordan Borean a écrit :
>
> Hey
>
> One thing you can do is use the win_region module
> https://docs.ansible.com/ansible/win_region_module.html to change the
> region of your hosts to a common value. If this isn't what you can do, you
> can also run an adhoc command to determine the group name based on the SID.
> Give the below tasks a shot and see if it returns what you are looking for.
>
> - name: get group name from sid
>> win_command: powershell.exe "((New-Object
>> System.Security.Principal.SecurityIdentifier('S-1-5-32-544')).Translate([System.Security.Principal.NTAccount]).Value
>>
>> -split '\\')[1]"
>> register: admin_group
>
> - debug:
>> var: admin_group.stdout_lines[0]
>
>
> It looks up the group name based on the SID 'S-1-5-32-544' which is the
> default SID for the local administrators group and should be consistent
> across all Windows OS'.
>
> Thanks
>
> Jordan
>
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/485b3cb2-b309-4031-9268-14ae36260fcd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
