User/Group Administration

From: Chris Stainer (cstainer@jscsc.org)
Date: 08/14/02 

From: "Chris Stainer" <cstainer@jscsc.org>
Date: Wed, 14 Aug 2002 09:17:41 -0700

Following a successful migration to Windows 2000, we are
starting to make use of dedicated groups to administer the
domain, i.e. Desktop Support Admins, Hardware Admins, that
can configure and administer computers but whom are not
members of the Domain Admins local group. However, we did
not include the two aforementioned groups into the local
(client) Administrators group, so they are having problems
connecting to the workstations remotely, or install
applications without having to use the local administrator
account (i.e. using RunAs, etc.)

Although myself and my colleagues are aware of logging
locally, via a deskside visit or via connecting in the MMC
(high TCO), I was wondering if anyone had a cool script
that would allow us to remotely add the two groups into the
local (client) Admins group, i.e. via VBScript or command-
line batch files (low TCO), or can this be done via Group
Policy???

Any advice would be much appreciated, by myself, our
systems administrators and our efficient helpdesk guys.

Regards,

Chris J. Stainer

Relevant Pages

  • Re: Delegating control to sites
    ... If you don't already have them, create OU's for each administrative unit ... can they administer DHCP on their site? ... Work out who the backup domain admins are when you are away ... I want to remove them from Domain Admins and delegate control over ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Admin Share
    ... I believe that only the NT Domain Admins have that right by default. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Now I can administer the NT Domain but I still ... Domain Admins group to the NT Domain Admins group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: webbased email administration
    ... We're considering setting up an email service here and we need to give IT ... admins in various companies the ability to administer their own email ...
    (freebsd-questions)
  • NT Domain and 2003 AD conversion
    ... I am taking a NT4 Domain group of admins, adding them to the 2003 AD ... I want to give these admins the permissions to administer their ... Should I first create an OU for the small group of users domain and ...
    (microsoft.public.windows.server.setup)
  • Re: Accessing Services Remotely in Windows XP
    ... simple file sharing and are not connected to any domain. ... know how can I administer them remotely because connecting to them fails ... > Online Support for IT Professionals - ...
    (microsoft.public.win2000.networking)
Quantcast