AddUser-SAMR

KO | EN

gitlite — search

#typescript #ai-agents #ai #dsh-plugin #deepseek-harness #open-source #claude-code #codex #cli #developer-tools #react #windows

★ 95 Open GitHub ↗

Create local administrators with the SAMR API (lowest-level technique). Implemented in C#, Crystal, Python and Rust

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# AddUser-SAMR

Create local administrators using the SAMR API, operating at a lower level than `net.exe`, PowerShell's `New-LocalUser` or `NetUserAdd` API.

It requires Administrator privileges and if the user exists, it gets added to the group but the password is not updated.

There are 5 implementations in this repo (C#, Python, Rust, Crystal and Deno), but there are public versions in other languages such as [C++](https://github.com/M0nster3/RpcsDemo/tree/main/MS-SAMR/AddUser) by [@M0nster3](https://github.com/M0nster3) or [BOF file](https://github.com/AgeloVito/adduserbysamr-bof) by [@AgeloVito](https://github.com/AgeloVito).

This code serves as complement to [this blog post](https://ricardojoserf.github.io/adduser_alternatives) about different techniques to create local accounts.

<br>

-----------------------------------

## Usage

The arguments are:

- `-u, --username` - Username to create (required)

- `-p, --password` - Password for the user (required)

- `-g, --group` - Group name (default: "Administrators")

- `-v, --verbose` - Enable verbose

- `-h, --help` - Show help message

```bash
# Basic usage
adduser.exe -u <username> -p <password>

# Specify group
adduser.exe -u <username> -p <password> -g <group>

# Verbose output
adduser.exe -u testuser -p MyPass123 -g Administrators -v
```

![img1](https://raw.githubusercontent.com/ricardojoserf/ricardojoserf.github.io/master/images/addusersamr/Screenshot_1.png)

<br>

-----------------------------------

## SAMR functions

The tool uses the following [SAMR protocol](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-samr/4df07fab-1bbc-452f-8e92-7853a3c7e380) calls:

- [SamConnect](https://ntdoc.m417z.com/samconnect) - Connect to the SAM server  
- [SamEnumerateDomainsInSamServer](https://ntdoc.m417z.com/samenumeratedomainsinsamserver) - Enumerate domains  
- [SamLookupDomainInSamServer](https://ntdoc.m417z.com/samlookupdomaininsamserver) - Get domain SIDs  
- [SamOpenDomain](https://ntdoc.m417z.com/samopendomain) - Open domain handles  
- [SamCreateUser2InDomain](https://ntdoc.m417z.com/samcreateuser2indomain) - Create the user account  
- [SamSetInformationUser](https://ntdoc.m417z.com/samsetinformationuser) - Set user password  
- [SamLookupNamesInDomain](https://ntdoc.m417z.com/samlookupnamesindomain) - Find admin group  
- [SamOpenAlias](https://ntdoc.m417z.com/samopenalias) - Open group handle  
- [SamRidToSid](https://ntdoc.m417z.com/samridtosid) - Convert RID to SID  
- [SamAddMemberToAlias](https://ntdoc.m417z.com/samaddmembertoalias) - Add user to group

<br>

-----------------------------------

## Compilation (for Windows)

### C#

Compile using Visual Studio or `msbuild`.

### Crystal

```
cd Crystal
crystal build adduser.cr --release
.\adduser.exe -u testuser -p MyPass123 -v
```

### Python

You can use the Python script:

```
cd Python
python adduser.py -u testuser -p MyPass123 -v
```

Or create a stand-alone binary with:

```
cd Python
pip install pyinstaller
pyinstaller -F adduser.py
.\dist\adduser.exe -u testuser -p MyPass123 -v
```

### Deno

```
cd Deno
deno run --allow-ffi adduser.js -u testuser -p MyPass123 -v
```

Or run it directly from the repo without cloning:

```
deno run --allow-ffi https://raw.githubusercontent.com/ricardojoserf/AddUser-SAMR/main/Deno/adduser.js -u testuser -p MyPass123 -v
```

### Rust

```
cd Rust && mkdir target
cargo build --release
.\target\release\adduser.exe -u testuser -p MyPass123 -v
```

<br>

AddUser-SAMR

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README