Re: Automatically assign user as administrator

From: Steven L Umbach (n9rouz_at_nscomcast.net)
Date: 11/07/03


Date: Fri, 07 Nov 2003 22:18:56 GMT

You can add a users domain account to the local administrators group on any member
machine in the domain. You can also use restricted groups in security policy/computer
configuration at the Organizational Unit level to add a group/user to the local
administrators group on any computer in the OU. However when you do that, all the
users currently in the local administrators group on those computers will be removed.
Do NOT do it at the domain level or it will affect domain administrators membership
also! You can also use cusrmgr to add groups to domain member machines via batch file
for large number of computers.

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q279301
http://support.microsoft.com/default.aspx?scid=kb;en-us;320045
http://support.microsoft.com/default.aspx?scid=kb;en-us;297307

"Jude" <anonymous@discussions.microsoft.com> wrote in message
news:02d801c3a566$9edb8660$a301280a@phx.gbl...
> Is there a way to to have a user automatically assigned
> as a local administrator if they login to a specific
> machine and also is there a way to set certain users to
> be set as a local administrator on any machine they login
> to? Thanks, Jude



Relevant Pages

  • Re: Group Policy
    ... You have to keep attention of "Members of this group" and "This group is a member of". ... administrators group of all computers in the domain. ... restricted groups, however this GP setting will remove all the users ... The Domain User of the PC to be only added to his local administrators ...
    (microsoft.public.windows.server.active_directory)
  • Re: Script to find out if a User is a member of a local group
    ... > complicated if you consider group nesting. ... > that checks if the current user is a member of the local Administrators ... > also revise this to check the Administrators group on several computers. ...
    (microsoft.public.windows.server.scripting)
  • Re: advise needed
    ... It sounds like you want to use the Restricted Groups GPO to make a certain ... security group a member of the affected computer's Local Administrators ... group become a member of the computers Local Administrators group. ...
    (microsoft.public.win2000.group_policy)
  • Re: How to start cmd.exe BOTH as administrator locally AND domain admin?
    ... What you need to do, in order to get domain and local administrator access is to create a domain account that is a member of the Domain Administrators group, and then make that account also a member of the local Administrators group on the machine you're working on. ...
    (microsoft.public.windows.vista.security)
  • Re: WSS and Active Directory Account Creation Mode
    ... Add your domain users to the local Administrators group of the server ... WSS security will apply. ... I haven't tested adding groups to the local Administrators group. ...
    (microsoft.public.sharepoint.windowsservices)