Announcement

Collapse
No announcement yet.

Set domain users as local admin

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Set domain users as local admin

    Hi guys

    Anyone know how I can set 'domain users' as local admin on a bunch of machines on the domain?

    Either via GP or a script.

    Thanks

  • #2
    Re: Set domain users as local admin

    Have a look at restricted groups
    http://www.windowsecurity.com/articl...ed-Groups.html
    cheers
    Andy

    Please read this before you post:


    Quis custodiet ipsos custodes?

    Comment


    • #3
      Re: Set domain users as local admin

      Excellent thanks Andy.

      Comment


      • #4
        Re: Set domain users as local admin

        I ended up using a simple batch file and deploying via GP.

        net localgroup administrators "Domain\Domain Users" /add

        Comment


        • #5
          Re: Set domain users as local admin

          I've used restricted groups as pointed out above, and added "DOM\domain users"

          (of course, you could restrict this further by creating something like G_WS_Local_Admin and then only add the users you want to this domain group, which would be a member of local\administrators)

          so on, so forth..

          my aim within our environment will be for domain users to be power users on the laptops and 'engineers' to be administrators on the workstattions and laptops.
          we'll also need to make domain users members of local admi non the laptops though, based on our specific requirements..
          Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

          Comment

          Working...
          X