<?php
function search($for) {
	if ($for == "user" | $for == "computer" | $for == "teachers") {
		if ($for == "teachers")
			$type = "teachers" && $for = "user";
		$results = array ();
		$ldap_host = "AD";
		$ldap_port = "389";
		if ($type == "teachers")
			$base_dn = "OU=Teachers,OU=School,dc=company,dc=local";
		else
			$base_dn = "OU=School,dc=company,dc=local";
		$filter = "(objectCategory=" . $for . ")";
		if ($for == "user")
			$get = array ("samaccountname" );
		if ($for == "computer")
			$get = array ("name" );
		
		$connect = ldap_connect ( $ldap_host, $ldap_port );
		ldap_set_option ( $connect, LDAP_OPT_PROTOCOL_VERSION, 3 );
		ldap_set_option ( $connect, LDAP_OPT_REFERRALS, 0 );
		$bind = ldap_bind ( $connect );
		$read = ldap_search ( $connect, $base_dn, $filter, $get );
		$info = ldap_get_entries ( $connect, $read );
		foreach ( $info as $open ) {
			if ($for == "user" && $open [samaccountname] [0] != "")
				$results [] = $open [samaccountname] [0];
			if ($for == "computer" && $open [name] [0] != "")
				$results [] = $open [name] [0];
		}
	}
	return $results;
}

$computers = search ( 'computer' );
foreach ( $computers as $computer ) {
	shell_exec("psexec  file://%5C%5C$computer - \\\\$computer wuauclt /resetauthorization /detectnow")
}
?>

Quote

•  hijackthis report.txt (18.86K)
  : 1
•  OTL.Txt (106.81K)
  : 1