Announcement

Collapse
No announcement yet.

Adding Domain user accounts by default to the Administrators group of domain computer

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Adding Domain user accounts by default to the Administrators group of domain computer

    Hi there,

    We have 2000 users in our Active Directory in single domain splitted with 40 Sites. Some of the Helpdesk users want to connect the domain PCs to do some administrative functions on the PCs, At the same time i have added these users in "HDESK" DL-G group and this "HDESK" DL-G group is member of Account operators group. they have access in the domain controllers for creating, deleting user IDs and to reset their passwords.

    Now i want to add this "HDESK" DL-G group in all the local PCs administrator group. so that they have administrativr right on the local PCs. is is possible to automate by GPO or script.so that i don't want to connect each pc and this group manually ??

    By default "Domain Admins" group is added to the administrators group in the PC if it is connected to the domain. but i don't want help desk users to give domain admin rights because of security reasons.


    Advanced Thanks

  • #2
    Re: Adding Domain user accounts by default to the Administrators group of domain computer

    I thought you can do this with restricted groups in a GPO

    http://www.windowsecurity.com/articl...ed-Groups.html
    http://www.windowsecurity.com/articl...ed-Groups.html
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Re: Adding Domain user accounts by default to the Administrators group of domain computer

      Thanks a lot Dumber for your valuable solution, Thanks for the link. This is what i need to do in my domain PCs. It really helps me in solving the difficulty i had.

      Comment

      Working...
      X