Thanks AcidHawk, the only thing is I don't think that module has any ability to actually create groups and modify the userlist associated to the groups. My deal is that I am tasked with migrating a old web app from a old server to a new one. I do not have access to the source code for the application and it relies heavily on local groups and users to provide access restrictions. To gauge the scope of the application it has close to 3500 groups and 900 users. the users may belong to multiple groups and depending on the groups they have access to different parts of the site. My plan was to use a program I have that dumps user/passhash to a file and then reload it to the new machine. then run a perl script that takes username/group relationships and creates an interim file that I can then transfer to the new box and use to recreate the groups. I also have to do the same thing at the filesystem level to set permissions / groups on a ton of files. This is turning out to be a mess -- it would have taken me like 5 minutes on a unix box. Do you have any ideas on modules that can be used to not only get group names but also membership on 2k boxes?


Thanks!
-Waswas

Hi, I looked in my Roths Win32 Perl Scripting book and found several references to backing up and restoring machine and user accounts (pg 129). Also chapter 2 talks about Account Maintenance. I could only find a small reference on pg 200 that talks about group membership. I'll type it up if you like.

Most of the scripts relating to user and group stuff is Lanman though, maybe worth a look..? (Btw I think Jenda is responsible for this..)

This may also be worth a look..

I then looked at my Roths Win32 Perl Programming bookand think I found what you are looking for. On page 126 there is a section about Group Account Management which talks about Adding groups and adding users to groups. So here is a quick snippet. it uses win32::netadmin.

#! /usr/bin/perl


use Win32::NetAdmin;

my $machine    = "\\\\server1";
my $group        = "TestGroup";
my @users     = qw(AcidHawk Fred Sally Bill);
my $server     = "";


Win32::NetAdmin::GroupCreate( $machine, $group, "This is a test group"
+) or die "Cannot create group\n";

my $result = Win32::NetAdmin::LocalGroupAddUsers( $server, $group, \@u
+sers);
if ($result) {
    print "Successfully added users to $group\n";
}
else {
    print "Failed to add users to $group\n";
}
[download]

Update: cpan:Win32::NetAdmin does have the following which may help

GroupGetMembers(server, groupName, userArrayRef)

Fills userArrayRef with the members of groupName.
[download]

and

LocalGroupGetMembers(server, groupName, userArrayRef)

Fills userArrayRef with the members of groupName.
[download]

as well as

GroupAddUsers(server, groupName, users)

Adds a user to a group.
[download]

and

LocalGroupAddUsers(server, groupName, users)

Adds a user to a group.
[download]

HTH..

-----
Of all the things I've lost in my life, its my mind I miss the most.

what would someone that has done a lot of work in this area use for do
+ing this?
[download]

Ok, maybe I asked the wrong way, I understand there are many Win32:: tree modules that handle this, I am asking for recomendations for the "best" or "most production ready" module out of that list list for this type of work. Also any problems people have run into managing local users and groups vs ad users and groups with these mods...
Win32::API,Win32::NetAdmin,Win32API::Net,Win32::AD::User


-Waswas