Zack Meier
25 lines
1023 B
PowerShell
25 lines
1023 B
PowerShell
$func = {
|
|
#Add to Local Security Policy
|
|
function Add-ServiceLogonRight([string] $Username) {
|
|
Write-Host "Enable ServiceLogonRight for $Username"
|
|
|
|
$tmp = New-TemporaryFile
|
|
secedit /export /cfg "$tmp.inf" | Out-Null
|
|
(Get-Content -Encoding ascii "$tmp.inf") -replace '^SeServiceLogonRight .+', "`$0,$Username" | sc -Encoding ascii "$tmp.inf"
|
|
secedit /import /cfg "$tmp.inf" /db "$tmp.sdb" | Out-Null
|
|
secedit /configure /db "$tmp.sdb" /cfg "$tmp.inf" | Out-Null
|
|
Remove-Item $tmp* -ea 0
|
|
}
|
|
|
|
Add-ServiceLogonRight -Username svccohesityadm
|
|
|
|
# Set Service to Run as Service Account
|
|
Stop-Service -Name CohesityAgent
|
|
sc.exe config "CohesityAgent" obj="NDGOV\svccohesityadm" password="memo-fUpHMMgXnv"
|
|
Start-Service -Name CohesityAgent
|
|
|
|
# Add to Local Administrators group
|
|
Add-LocalGroupMember -Group Administrators -Member "ndgov\svccohesityadm"
|
|
}
|
|
|
|
Invoke-Command -ComputerName itddhssql19p1.nd.gov -Credential $PrvCred -ScriptBlock $func |