# Add a domain user to a local group on the remote computer $localGroupName = "Asministrators" #Group Name of Admins here $domainName = "DN=YourDomainName,DN=com" #Enter Your Domain Name Here $strFilter = "(&(objectCategory=Computer)(!userAccountControl:1.2.840.113556.1.4.803:=2))" $objDomain = New-Object System.DirectoryServices.DirectoryEntry("LDAP://$domainName") $objSearcher = New-Object System.DirectoryServices.DirectorySearcher $objSearcher.SearchRoot = $objDomain $objSearcher.PageSize = 1000 $objSearcher.Filter = $strFilter $colResults = $objSearcher.FindAll(); foreach ($objResult in $colResults) { $objItem = $objResult.Properties; $computerName=$objItem.name $user_name=[regex]::Split($objItem.name,"-")[0] ([ADSI]"WinNT://$computerName/$localGroupName,group").Add("WinNT://$domainName/$user_name") }