Re: domain administrator user to installed software on workstations?



Hi,

Correction. The script would look like

net localgroup Administrators domain\admin-user /add

--
Mike
Microsoft MVP - Windows Security

"Miha Pihler [MVP]" <mihap-news@xxxxxxxxxxx> wrote in message
news:uMJGFjzXGHA.3740@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

If you follow security guides and recommendations you should _never_ logon
to any client computer with domain administrator account.

Best practice is to create new account in domain (ordinary user account
that is not member of Administrators or Domain Administrators groups...).
Now add this account to _local_ administrator group on the computer where
you need to install the software. Once this is done logon using this
account and install the software.

If you want to add this account to multiple computers local administrator
group you can use this script as _startup_ script (not logon script).

net group administrators domain\admin-user /add

where:
domain is name of your domain
admin-user is user that you created in AD that will have local
administrator permissions

--
Mike
Microsoft MVP - Windows Security


"server 2000 Group policy for windows xp"
<server2000Grouppolicyforwindowsxp@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:302FE945-1BE8-4030-B3BE-FF42B41959D3@xxxxxxxxxxxxxxxx
Server 2000, 30 windows xp and windows 2000 workstations.
The best way of installing software is...with a domain admin account or
local domain admin , or do i need to created a special domain user so i
can
installed the software on the workstaion ,,OR please give advices how i
can
do this installation

On this environments.

Many thanks for your time and help.





.