Re: Making a domain account a local admin wherever it is used?

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 10/24/05 

Date: Mon, 24 Oct 2005 14:24:29 -0500

There are a couple of ways to do this - using Group Policy Restricted Groups
or a Group Policy "startup" script that uses the net localgroup command that
adds the domain user to the administrators group. See the link below on how
to use Restricted Groups with the "member of" option which requires that the
Windows 2000 domain controllers be SP4 to work correctly. You would want to
use Restricted Groups at the OU level in your situation and not the domain
container. The OU would contain the computers that you want Restricted
Groups to apply to. --- Steve

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

<mulhollands@rocketmail.com> wrote in message
news:1130149638.779362.189710@z14g2000cwz.googlegroups.com...
>
> Hello, I wonder if someone could help me.
>
> We wish to make one particular user a local admin on whatever
> workstation he logs on to. He wanders about the organisation quite a
> lot :)
>
> Running W2K/2003 server, XP SP2 workstations.
>
> Is there any way to do this?
>
> Thanks
>
> Stephen
>

Relevant Pages

  • Re: Add a domain user group to local computer administrator group
    ... I searched in the group policy for those Restricted groups, ... >> I used a script like the one you gaves, but the script didn't work on ... >>> ' Bind to domain user CNProgramming ...
    (microsoft.public.windows.server.scripting)
  • RE: Please Help With Using Restricted Groups
    ... I tried one of your suggestions, of adding the DNS suffix. ... a GPO for the OU I am targeting for the restricted groups. ... An additional step I took was to make the group policy users and computers ... > check the DNS settings on the machine and ensure its DNS suffix and DNS ...
    (microsoft.public.win2000.active_directory)
  • Re: Local Printer Access
    ... > You can force a user into a local group via group policy using restricted ... > Restricted Groups Policy Settings ... > Members and Member Of. ... > Stand-Alone Server Default Settings ...
    (microsoft.public.windows.server.active_directory)
  • Re: Is their a way to add a domain group to a local group?
    ... Group Policy "startup script" using the command net local in a script. ... is configured for and linked to with Restricted Groups. ... > members of this 'ITSupport group' can install software to local machines. ...
    (microsoft.public.windows.group_policy)
  • Re: Modifying Local Groups
    ... You could use a Group Policy startup script using the net localgroup command ... or Group Policy Restricted Groups with the "this group is a member of" ... For Restricted Groups the computers you want to do this to must be ...
    (microsoft.public.windowsxp.security_admin)
Loading