Powershell枚举远程机器上的本地权限组
发布时间:2020-12-15 07:07:18 所属栏目:安全 来源:网络整理
导读:今天PHP站长网 52php.cn把收集自互联网的代码分享给大家,仅供参考。 # ==============================================================================================# # NAME: Get-LocalGroupMembers# # AUTHOR: B
以下代码由PHP站长网 52php.cn收集自互联网 现在PHP站长网小编把它分享给大家,仅供参考 # ============================================================================================== # # NAME: Get-LocalGroupMembers # # AUTHOR: Ben Baird # DATE : 8/12/2011 # # COMMENT: # Given a machine name,retrieves a list of members in # the specified group. # ============================================================================================== function Get-LocalGroupMembers { param( [parameter(Mandatory=$true,ValueFromPipeline=$true,ValueFromPipelineByPropertyName=$true)] [Alias("Name")] [string]$ComputerName,[string]$GroupName = "Administrators" ) begin {} process { # If the account name of the computer object was passed in,it will # end with a $. Get rid of it so it doesn't screw up the WMI query. $ComputerName = $ComputerName.Replace("`$",'') # Initialize an array to hold the results of our query. $arr = @() $wmi = Get-WmiObject -ComputerName $ComputerName -Query ` "SELECT * FROM Win32_GroupUser WHERE GroupComponent=`"Win32_Group.Domain='$ComputerName',Name='$GroupName'`"" # Parse out the username from each result and append it to the array. if ($wmi -ne $null) { foreach ($item in $wmi) { $arr += ($item.PartComponent.Substring($item.PartComponent.IndexOf(',') + 1).Replace('Name=','').Replace("`"",'')) } } $hash = @{ComputerName=$ComputerName;Members=$arr} return $hash } end{} } 以上内容由PHP站长网【52php.cn】收集整理供大家参考研究 如果以上内容对您有帮助,欢迎收藏、点赞、推荐、分享。 (编辑:李大同) 【声明】本站内容均来自网络,其相关言论仅代表作者个人观点,不代表本站立场。若无意侵犯到您的权利,请及时与联系站长删除相关内容! |