Re: admin group in OU - help please

From: Alaa Abdelhalim [MSFT] (alaa_at_online.microsoft.com)
Date: 06/12/03


Date: Thu, 12 Jun 2003 12:03:32 -0700


Hello Sigitas,
Your observation is correct. I had forgotten about your non-administrative
users being unable to use this method.
Let me get back to you with a better answer.

Thank you

-- 
Alaa Abdelhalim [MSFT]
-----
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
"Sigitas Skublickas" <sskublickas@acf.hhs.gov> wrote in message
news:Ol4t$0GMDHA.1216@TK2MSFTNGP11.phx.gbl...
> Thanks for you reply. But i still have one problem. If the user on who's
> macine I'm starting this script
> is not in a Local admin group the i get script error: Access Denied.
> If i login with a user that has local admin rights then the script adds
user
> from OU to local admin
> group and everything is ok
> What should I do to fix the problem with a users who no not have local
admin
> privilages?
> And - Is there a way how I can complete this task using GPO's ?
>
> For example be default Domain Admins group is somehow added automatically
to
> all machines
> local admin group at the time of joining them to domain. Can I add some
> other groups the same
> way ?
>
> S
>
> "Alaa Abdelhalim [MSFT]" <alaa@online.microsoft.com> wrote in message
> news:uQGml3FMDHA.2892@TK2MSFTNGP10.phx.gbl...
> > You need to decide which user accounts are going to have Admin123 as an
> > administrator on their machines (e.g. the users in that OU) and then set
> > their logon scripts to run this command:
> > net localgroup administrators %userdomain%\admin123 /add
> >
> >
> >
> >
> > --
> > Alaa Abdelhalim [MSFT]
> > -----
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > Please do not send e-mail directly to this alias. This alias is for
> > newsgroup purposes only.
> >
> >
> >
> > "Sigitas Skublickas" <sskublickas@acf.hhs.gov> wrote in message
> > news:#$EJe$EMDHA.212@TK2MSFTNGP10.phx.gbl...
> > > Hello everybody. I have this situation:
> > >
> > > I created OU in AD. Granted rights to some users so that they can do
> admin
> > > stuff for
> > > OU objects. Also I created Admin123 group in that OU.  I want this
> > Admin123
> > > group
> > > be added to a client machines local admin group at a  logon time. What
> > > should I configure?
> > >
> > > thanks!!
> > >
> > > S
> > >
> > >
> >
> >
>
>


Relevant Pages

  • Re: admin group in OU - help please
    ... You can use Windows Installer in conjunction with group policy to deploy ... Please do not send e-mail directly to this alias. ... >> macine I'm starting this script ... >> is not in a Local admin group the i get script error: ...
    (microsoft.public.win2000.security)
  • Re: SBS2003 Client Setup Wizard Problem
    ... I WAS NOT happy with adding users to the local admin group even for first ... they will ask for User Account Control for permission to connect to the domain. ... this user will be added to local admin user group on the client computers. ...
    (microsoft.public.windows.server.sbs)
  • Re: Clip Art Error 0x8007000E Not enough memory
    ... I added them to the local admin group. ... > downloading these two files and installing them onto ... > I am able to insert Clip Art when I login to the TS ...
    (microsoft.public.windows.server.sbs)
  • Re: admin group in OU - help please
    ... is not in a Local admin group the i get script error: ... If i login with a user that has local admin rights then the script adds user ... > administrator on their machines and then set ...
    (microsoft.public.win2000.security)
  • Re: Startup Script Problem
    ... >I am trying to execute a VBS script at startup but keep getting an error. ... > The script is to add a network group to the local admin group of the> machine. ... > Scrpt executes fine if run manually, so I know there is nothing wrong with> it, but fails if run as a GPO startup script. ...
    (microsoft.public.windows.server.active_directory)