Add User to Local Administrator Group with PowerShell (Add-LocalGroupMember)

PowerShell(PS), a versatile framework developed by Microsoft, is a powerful tool for task automation and configuration management. Among its many capabilities, PowerShell makes managing user accounts and groups seamless. Administrators can efficiently manage membership in local groups on Windows systems by using PowerShell to add user to local administrator groups. This functionality is important for improving security, delegating tasks, and automating administrative processes.

In this guide, we'll explore how to manage a local user account with PowerShell. In addition, we’ll cover everything from basic commands related to Powershell add user to local admin group to more advanced scripting techniques, complete with practical examples to help you gain proficiency in this vital administrative task.

How to Manage Local User Accounts Using PowerShell? 

PowerShell provides a straightforward and efficient way to automate user management tasks on Windows systems. Below, we will perform various operations on local PowerShell user accounts.

List Local User Accounts with Properties Using PowerShell (Get-ADUser)

You can easily retrieve information about a local user and their associated properties in PowerShell. To do this, open a PowerShell terminal and run the following command:

> Get-ADUser -Identity Toms -Properties *

The Get-ADUser cmdlet is used to query Active Directory for user information. The -Identity parameter specifies the username, in this case, "Toms." The -Properties * parameter retrieves all available properties for the specified user.

It displays a detailed list of all the properties associated with the user account, providing comprehensive insight into their configuration and settings. With these tools, managing local user accounts becomes a simple and automated process, saving time and ensuring accuracy in administrative tasks.

Create Local User PowerShell (PowerShell Add User New-LocalUser)

PowerShell simplifies the process of creating new local user accounts through the New-LocalUser cmdlet. This versatile command allows you to set up accounts with or without passwords, offering flexibility for various administrative needs.

Key Parameters for New-LocalUser

The New-LocalUser cmdlet supports several parameters that let you customize the account configuration:

The New-LocalUser cmdlet is used to create a local user account on a system. It enables the creation of a new account for local use. Follow the below steps in PowerShell add user to local group with PowerShell:

1. Open PowerShell with administrator privileges.

2. If you want to create a local user account without password, use this command:

> New-LocalUser -Name 'SamreenaTest' -Description 'Description of this account.' -NoPassword

3. To create a user account that has a password, enter the following command to securely input a password:

$password = Read-Host -AsSecureString

You will need to set the password for that account and then execute the below command:

New-LocalUser -Name "Samreena" -Password $password -FullName "Samreena User" -Description "Vip user"

The above command creates a user account named "Samreena" with the full name of "Samreena Userr" and a description of "Vip user."

Important Note: Make sure to run PowerShell as an administrator to ensure you have the required permissions to create local user accounts. Failing to do so may result in insufficient privileges for executing these commands.

Changing a Local User's Password with PowerShell

PowerShell makes it simple to update a local user’s password or modify password-related settings using the Set-LocalUser cmdlet. 

Change Password

To update the password of an existing Local user account with PowerShell, Use the following commands to set the username and new password:

$userName = "ExistingUser"

$newPassword = ConvertTo-SecureString "NewPassword123!" -AsPlainText -Force

Replace "ExistingUser" with the username of the account you want to update. And also replace "NewPassword123!" with the desired password.

Now, use the Set-LocalUser cmdlet to update the password:

> Set-LocalUser -Name $userName -Password $newPassword

Important Note: Ensure that you run PowerShell as an administrator to have the necessary permissions to make these changes. Using secure strings helps protect sensitive information like passwords during the process.

By completing these steps, the specified user's password will be successfully updated.

Changing Password Properties with PowerShell

PowerShell allows you to update a user's password properties efficiently using the Set-LocalUser cmdlet. Here's how you can configure these settings:

Define the username of the account you want to modify:

$userName = "ExistingUser"

Use the following command to change password properties:

Set-LocalUser -Name $userName -PasswordNeverExpires $true 
-UserMayNotChangePassword $true

The above command ensures the password never expires and prevents the user from changing it. Adjust the parameters to match your specific requirements.

1. Administrative Privileges:

Run PowerShell as an administrator to ensure you have the necessary permissions to modify user account settings.

2. Security Practices:

Always adhere to security best practices and confirm that you are authorized to make changes to local user accounts.

Deleting Local User Account with PowerShell

To delete a local user account with PowerShell, you can use the Remove-LocalUser cmdlet. To delete an account, specify the username of the account to be deleted:

$userName = "UserToDelete"
Remove-LocalUser -Name $userName

Replace "UserToDelete" with the username of the local user account you want to delete. To delete local user accounts, ensure that you are running PowerShell with administrative rights.

Double-check the account you're deleting to avoid accidentally removing vital accounts. When you delete a user account, the related user profile data is also removed, so proceed with caution.

How to Manage Local Groups Using PowerShell? (PowerShell Add user to Local Group)

PowerShell provides commands to manage local groups and their members effectively. Ensure you have the required permissions and that PowerShell remoting is enabled for remote systems.

List Local Groups with PowerShell (Get-LocalGroup)

The Get-LocalGroup cmdlet retrieves local security groups stored in the Security Account Manager. It can fetch both default built-in groups and any custom local security groups you have created. To list all local groups on a Windows machine, run:

> Get-LocalGroup

This command displays all existing local groups on the system.

Create a Local Group with PowerShell

The New-LocalGroup cmdlet is used to create a new local security group within the Security Account Manager. To create a new local security group, use:

New-LocalGroup -Name "NewGroup" -Description "Description of the new group"

Members of a local group inherit the permissions and privileges assigned to that group. For example, members of the Administrators group have Full Control over the system.

Tip: Keep the Administrators group membership minimal to maintain system security. In domain environments, you can add accounts from the local and trusted domains to a local group.

Add User to Local Group Powershell (PowerShell Add User to Local Group Add-LocalGroupMember )

In Powershell add user to local group, using the Add-LocalGroupMember cmdlet. For example, we want to add user to local group PowerShell named “Samreena”. To add user to local administrator group, run the following command:

>Add-LocalGroupMember -Group Administrators -Member TestUser -Verbose

If the computer is part of a domain, you can also add an Active Directory user to the local group by specifying the domain name. For example, to add the Beta user from the AutomationLab domain:

>Add-LocalGroupMember -Group Administrators -Member AutomationLab\Beta

This allows you to manage both local and domain users within local groups on your system.

List Group Membership of a Specific Group with PowerShell

To check the group memberships of a user and examine Group Policy settings, use the gpresult tool. Open PowerShell with elevated privileges. Log in as the user whose group memberships you want to review:

> gpresult /R

The above command displays the user’s group memberships and applied Group Policy settings.

List User's Memberships in all Groups with PowerShell

To list all groups a user belongs to, use:

Get-LocalUser "UserName" | Get-LocalGroup

Removing a Local Group

To delete a local group, use:

Remove-LocalGroup -Name "GroupName"

The above command only removes the group, not associated user or computer accounts. Once deleted, a group cannot be restored, and new groups with the same name won't inherit the old group's permissions.

Conclusion

PowerShell is an essential tool for administrators and users alike, offering a powerful set of commands to manage local users efficiently, groups, and group policies on Windows systems and how to add users to local group Powershell. Its scripting capabilities simplify administrative tasks, from reviewing and modifying local user settings to seamlessly handling Active Directory integrations. 

PowerShell streamlines these processes, making system management more efficient and automated.

Experience top-tier performance with BlueVPS.com—simple, scalable, and fully customizable for your needs. Enjoy a dedicated environment with unlimited traffic for seamless operations. Boost your business with our powerful BlueVPS servers today! Enjoy full admin rights, high-speed SSD storage, and effortless scalability. Get started now and elevate your hosting experience!