From 5da50abc5a69df07b0146354a4a254b1f06b0ad0 Mon Sep 17 00:00:00 2001
From: ek-dyoder <dyoder@emberkom.com>
Date: Wed, 8 Oct 2025 17:44:17 -0400
Subject: [PATCH] update provisioning admin username to "ek-provadmin" and add
 domain controller check

---
 Remove-EmberkomProvisioningAdminUser.ps1 | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/Remove-EmberkomProvisioningAdminUser.ps1 b/Remove-EmberkomProvisioningAdminUser.ps1
index 2e31d3f..a77e02f 100644
--- a/Remove-EmberkomProvisioningAdminUser.ps1
+++ b/Remove-EmberkomProvisioningAdminUser.ps1
@@ -1,5 +1,11 @@
 # Define the username of the provisioning admin account
-$ProvisioningAdminUsername = "EmberkomProvisioningAdmin"
+$ProvisioningAdminUsername = "ek-provadmin"
+
+# Exit if this is a domain controller
+If ( $(Get-CimInstance -ClassName Win32_OperatingSystem -Property ProductType | Select-Object -ExpandProperty ProductType) -eq "2" ) {
+    Write-Output "Cannot create or modify local accounts on a domain controller"
+    Exit 0
+}
 
 # Get the provisioning admin user account
 $ProvisioningAdmin = Get-LocalUser -Name $ProvisioningAdminUsername -ErrorAction SilentlyContinue