'Modifies local Sophos Groups on a domain 
'=============================================
on error resume next

dim sh, key, strComputer, DomainString, LocalString, fso, textfile

Set fso = WScript.CreateObject("Scripting.FileSystemObject")
set textfile = fso.CreateTextFile ("C:\Program Files\Sophos\GroupMods.txt",2,true)
set sh = Wscript.CreateObject("Wscript.Shell")

'get domain name 
key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Currentversion\Winlogon\CachePrimaryDomain"
Domain = sh.RegRead (key)

strComputer = "."


' Add <Sophos Domain Admins> group to Local <SophosAdministrator> group and remove <Domain Admins>
DomainString = "Domain Admins"
LocalString = "SophosAdministrator"
Set objGroup = GetObject _
    ("WinNT://" & strComputer & "/" & LocalString &",group")
objGroup.Add ("WinNT://" & Domain & "/Sophos " & DomainString)
objGroup.Remove ("WinNT://" & Domain & "/" & DomainString)
textfile.WriteLine LocalString & "Group Modified"


' Add <Sophos Domain Users> group to Local <SophosUser> group and remove <Domain Users>
DomainString = "Domain Users"
LocalString = "SophosUser"
Set objGroup = GetObject _
    ("WinNT://" & strComputer & "/" & LocalString &",group")
objGroup.Add ("WinNT://" & Domain & "/Sophos " & DomainString)
'objGroup.Remove ("WinNT://" & Domain & "/" & DomainString)
textfile.WriteLine LocalString & "Group Modified"


' Add <Sophos Domain PowerUsers> group to Local <SophosPowerUser> group and remove <Domain Users>
DomainString = "Domain PowerUsers"
LocalString = "SophosPowerUser"
Set objGroup = GetObject _
    ("WinNT://" & strComputer & "/" & LocalString &",group")
objGroup.Add ("WinNT://" & Domain & "/Sophos " & DomainString)
objGroup.Remove ("WinNT://" & Domain & "/Domain Users")
textfile.WriteLine LocalString & "Group Modified"