However, the script relies on hard-coded values for the name of the local group and the name of the global group. NewLocalGroup.vbs uses a command-line argument to obtain the names of the computers to which to connect. However, before the script can perform these tasks, it needs certain information. adds the global group to the new local group.enumerates the local groups to see whether a group with that name already exists.NewLocalGroup.vbs performs the following tasks: Remote computers have the same requirements. You can run this script on computers running any NT-based OS (NT 4.0 through Windows 2003) with Active Directory Service Interfaces (ADSI), Windows Script Host (WSH) 5.6, and Windows Management Instrumentation (WMI) installed. Go to, enter InstantDoc ID 41833 in the InstantDoc ID box, then click Download the Code. The result is NewLocalGroup.vbs, a fully commented script that you can download from the Windows Scripting Solutions Web site. Rather than try to work around the Net Localgroup command's limitations, I decided to write a script. In addition, you can't create group or user accounts before adding them to the new local group.

However, although this command works well for creating groups on one local computer, it's not too useful for automating group creation on multiple remote computers. I first looked into using the Net Localgroup command, which lets you create local groups from the command line rather than the GUI. So, I decided to automate the group creation process.

However, creating local groups from the GUI is clumsy, time-consuming, and prone to typographical errors. (Global groups can go into local groups but not vice versa.) As soon as you add the global groups to the local groups, the global groups inherit the appropriate permission set. If you plan to rebuild domain controllers (DCs) from scratch or migrate from Windows NT 4.0 SAM domains to Windows Server 2003 Active Directory (AD) domains, you can easily set group permissions by creating local groups, setting their permissions, then placing your global groups inside the local groups.

Group manager build nodes