添加用户到power users组或network configuration operators组

dennylsg

Hi,我们公司想实现这样一个需求:首先公司的计算机命名方法是:laptop:CNGZ01LXXX,desktop:CNGZ01DXXX,现在公司里面所有的域帐号都加入到计算机本地的administrators组,现
在需要减少用户的权限,把用desktop的用户加入到power users组,用laptop的加入到network configuration operators,想通过域登录脚本的批处理来实现,现在本人只能加组的批
处理,不能根据条件来加入组:

1. net localgroup administrators %userdomain%\%username% /del
   
2. net localgroup "power users" %userdomain%\%username% /add

复制代码

请问用批处理怎么利用计算机名中的L和D来分别加到各自的组,谢谢.

Seter

具体怎么我不懂,但我还是写了个,具体就是用%username:~,1%和if来实现

1. if "%username:~,1%"=="l" (
   
2. net localgroup "network configuration operators" %userdomain%\%username% /add
   
3. ) else (
   
4. net localgroup "power users" %userdomain%\%username% /add
   
5. )

复制代码

Batcher

test-1.bat
根据 ChassisTypes 判断
https://devblogs.microsoft.com/scripting/how-can-i-determine-if-a-computer-is-a-laptop-or-a-desktop-machine

1. @echo off
   
2. for /f "tokens=2 delims={}" %%i in ('wmic Path Win32_SystemEnclosure get ChassisTypes /value') do (
   
3.     set "CompType=%%i"
   
4. )
   
5. if "%CompType%" equ "3" (
   
6.     echo 台式机
   
7. ) else if "%CompType%" equ "10" (
   
8.     echo 笔记本
   
9. ) else (
   
10.     echo 未知
    
11. )
    
12. pause

复制代码

test-2.bat
根据 PCSystemType 判断
https://learn.microsoft.com/en-us/dotnet/api/microsoft.powershell.commands.pcsystemtype?view=powershellsdk-1.1.0

1. @echo off
   
2. for /f "tokens=2 delims==" %%i in ('wmic ComputerSystem get PCSystemType /value') do (
   
3.     for %%a in ("%%i") do (
   
4.         set "CompType=%%~a"
   
5.     )
   
6. )
   
7. if "%CompType%" equ "1" (
   
8.     echo 台式机
   
9. ) else if "%CompType%" equ "2" (
   
10.     echo 笔记本
    
11. ) else (
    
12.     echo 未知
    
13. )
    
14. pause

复制代码

test-3.bat
根据 PCSystemType 判断
https://learn.microsoft.com/en-us/windows/win32/cimwin32prov/win32-battery

1. @echo off
   
2. for /f "tokens=2 delims==" %%i in ('wmic Path Win32_Battery Get BatteryStatus 2^>nul') do (
   
3.     for %%a in ("%%i") do (
   
4.         set "BatteryValue=%%~a"
   
5.     )
   
6. )
   
7. if "%BatteryValue%" equ "1" (
   
8.     echo 笔记本
   
9. ) else if "%BatteryValue%" equ "2" (
   
10.     echo 笔记本
    
11. ) else (
    
12.     echo 台式机
    
13. )
    
14. pause

复制代码

test-4.bat
综合多个条件进行判断

1. @echo off
   
2. set "DesktopVote=0"
   
3. set "LaptopVote=0"
   
4. 
   
5. for /f "tokens=2 delims={}" %%i in ('wmic Path Win32_SystemEnclosure get ChassisTypes /value') do (
   
6.     set "CompType=%%i"
   
7. )
   
8. if "%CompType%" equ "3" (
   
9.     set /a DesktopVote+=1
   
10. ) else if "%CompType%" equ "10" (
    
11.     set /a LaptopVote+=1
    
12. )
    
13. 
    
14. for /f "tokens=2 delims==" %%i in ('wmic ComputerSystem get PCSystemType /value') do (
    
15.     for %%a in ("%%i") do (
    
16.         set "CompType=%%~a"
    
17.     )
    
18. )
    
19. if "%CompType%" equ "1" (
    
20.     set /a DesktopVote+=1
    
21. ) else if "%CompType%" equ "2" (
    
22.     set /a LaptopVote+=1
    
23. )
    
24. 
    
25. for /f "tokens=2 delims==" %%i in ('wmic Path Win32_Battery Get BatteryStatus /value 2^>nul') do (
    
26.     for %%a in ("%%i") do (
    
27.         set "BatteryValue=%%~a"
    
28.     )
    
29. )
    
30. if "%BatteryValue%" equ "1" (
    
31.     set /a LaptopVote+=1
    
32. ) else if "%BatteryValue%" equ "2" (
    
33.     set /a LaptopVote+=1
    
34. ) else (
    
35.     set /a DesktopVote+=1
    
36. )
    
37. 
    
38. if %LaptopVote% gtr %DesktopVote% (
    
39.     echo 笔记本
    
40. ) else if %LaptopVote% lss %DesktopVote% (
    
41.     echo 台式机
    
42. ) else (
    
43.     echo 未知
    
44. )
    
45. pause
    

复制代码

dennylsg

thank you,终于写出来了.

1. if /i "%computername:~6,1%"=="d" (
   
2. net localgroup administrators %userdomain%\%username% /del net localgroup "power users" %userdomain%\%username% /add
   
3. ) else (
   
4. net localgroup administrators %userdomain%\%username% /del net localgroup "network configuration operators" %userdomain%\%username% /add
   
5. )

复制代码