Remotely changing admin group membership on clients

From: SCavignac (SCavignac.105dqc_at_mail.mcse.ms)
Date: 01/17/04 

Date: Fri, 16 Jan 2004 17:11:07 -0600

I am looking for a way to add a domain account to the local
Admnistrator's group on all the Windows 2000 and Windows XP
workstations in the domain.

I do not want to add the account to the Domain Admins group because I
do not want the person logging on to the local machine to perform
certain tasks (which require administrative privilege) to be able to
add or remove the workstation from the domain. The user account I want
to use also needs to be able to connect remotely to administrative
shares on the workstations.

I was hoping to be able to use Group Policy or some other 'centralized'
method to be able to place a domain user account or global group in the
local admin group.

I am open to any other suggestions as well.

I really don't want to visit every workstation and add the user
manually.

Any ideas?

SCavignac
------------------------------------------------------------------------
Posted via http://www.mcse.ms
------------------------------------------------------------------------
View this thread: http://www.mcse.ms/message292134.html
 

Relevant Pages

  • Re: W2K3 Network with NT box. Logon Script Question
    ... I have a just upgraded to a Windows 2003 newtwork (From Windows ... I have a few remaining windows NT workstations. ... be a new user account and the mapped drive. ... Set up the profile as you like it. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Setting Account Lockout Policies with a NT PDC
    ... You can rename the local user accounts and/or change the passwords on ... workstations using the "cusrmgr.exe" command from the Windows 2000 Pro - ... Setting Account Lockout Policies with a NT PDC ... PDC is a Windows NT Server ...
    (Focus-Microsoft)
  • Re: Rollback Solution / Password Reset
    ... Mike Davidson Ireland ... environment where workstations are loosing connection to the Domain. ... the server is throwing the account off the domain. ... Instead of the website you're using, I suggest to use OEx (Outlook Express ...
    (microsoft.public.windows.server.active_directory)
  • Re: Set permission to only allow a group to join computers to domain
    ... By default each user can join up to 10 workstations to a domain in a Windows ... They would know the password for the local Administrator account, ... Policies\User Rights Assignment ...
    (microsoft.public.windows.server.active_directory)
  • Re: User account lockout
    ... Workstations are Windows XP and Server is ... > before the account is locked out. ... Microsoft MVP Scripting and ADSI ...
    (microsoft.public.windows.server.active_directory)