Re: admin group in OU - help please

From: Sigitas Skublickas (sskublickas_at_acf.hhs.gov)
Date: 06/12/03 

Date: Wed, 11 Jun 2003 19:00:25 -0400

Thanks for you reply. But i still have one problem. If the user on who's
macine I'm starting this script
is not in a Local admin group the i get script error: Access Denied.
If i login with a user that has local admin rights then the script adds user
from OU to local admin
group and everything is ok
What should I do to fix the problem with a users who no not have local admin
privilages?
And - Is there a way how I can complete this task using GPO's ?

For example be default Domain Admins group is somehow added automatically to
all machines
local admin group at the time of joining them to domain. Can I add some
other groups the same
way ?

S

"Alaa Abdelhalim [MSFT]" <alaa@online.microsoft.com> wrote in message
news:uQGml3FMDHA.2892@TK2MSFTNGP10.phx.gbl...
> You need to decide which user accounts are going to have Admin123 as an
> administrator on their machines (e.g. the users in that OU) and then set
> their logon scripts to run this command:
> net localgroup administrators %userdomain%\admin123 /add
>
>
>
>
> --
> Alaa Abdelhalim [MSFT]
> -----
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> Please do not send e-mail directly to this alias. This alias is for
> newsgroup purposes only.
>
>
>
> "Sigitas Skublickas" <sskublickas@acf.hhs.gov> wrote in message
> news:#$EJe$EMDHA.212@TK2MSFTNGP10.phx.gbl...
> > Hello everybody. I have this situation:
> >
> > I created OU in AD. Granted rights to some users so that they can do
admin
> > stuff for
> > OU objects. Also I created Admin123 group in that OU. I want this
> Admin123
> > group
> > be added to a client machines local admin group at a logon time. What
> > should I configure?
> >
> > thanks!!
> >
> > S
> >
> >
>
>

Relevant Pages

  • Re: SBS2003 Client Setup Wizard Problem
    ... On the problematic machines, I wonder if the Domain Users group ... any user logging into these machines can run the script (i.e, ... local admin group in order to succesfully run the client setup wizard ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS2003 Client Setup Wizard Problem
    ... I WAS NOT happy with adding users to the local admin group even for first ... they will ask for User Account Control for permission to connect to the domain. ... this user will be added to local admin user group on the client computers. ...
    (microsoft.public.windows.server.sbs)
  • Re: Clip Art Error 0x8007000E Not enough memory
    ... I added them to the local admin group. ... > downloading these two files and installing them onto ... > I am able to insert Clip Art when I login to the TS ...
    (microsoft.public.windows.server.sbs)
  • Adding global groups to local admin groups on remote machines
    ... I have about 1400 machines in the building I support. ... each machine as the local admin and add the groups. ... put these global groups in each machines local admin group ... but most of them fail due to permissions issues. ...
    (microsoft.public.win2000.cmdprompt.admin)
  • Re: How to globally change machine local admins
    ... You could script a freeware tool called lg on www..joeware.net to do this. ... Basically your script would loop through the machines in a list, ... the administrators group, parse out the entries and remove all of them ... we want to remove users from the local admin group ...
    (microsoft.public.win2000.security)