Announcement

Collapse
No announcement yet.

add domain user to local admin

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • add domain user to local admin

    hi guys, how to add a domain user as member of the local admin group? thank you.

  • #2
    Re: add domain user to local admin

    go to computer management, users and groups, groups, administrators
    add the domain user.

    done.
    Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

    Comment


    • #3
      Re: add domain user to local admin

      Or use Restricted Groups in Group Policy to do it on a large scale.
      Simples
      Tom Jones
      MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
      PhD, MSc, FIAP, MIITT
      IT Trainer / Consultant
      Ossian Ltd
      Scotland

      ** Remember to give credit where credit is due and leave reputation points where appropriate **

      Comment


      • #4
        Re: add domain user to local admin

        net localgroup "administrators" "domain\user" /add
        Please remember to award reputation points if you have received good advice.
        I do tend to think 'outside the box' so others may not always share the same views.

        MCITP -W7,
        MCSA+Messaging, CCENT, ICND2 slowly getting around to.

        Comment


        • #5
          Re: add domain user to local admin

          Originally posted by Ossian View Post
          Or use Restricted Groups in Group Policy to do it on a large scale.
          Simples
          sorry, i'm so noob..will use a script to implement this?
          thanks.

          sorry just did a bit of assignment can use gpmc.msc then create an ou..
          thanks, guys for the ideas.
          Last edited by JJJCR; 24th November 2010, 04:39.

          Comment


          • #6
            Re: add domain user to local admin

            Can be done via Script, but a GPO is much easier.

            Comment


            • #7
              Re: add domain user to local admin

              Right click on My Computer, select Manage and then Under Local Users and Groups, expand groups , double click Administrators Group add the user under the Members tab.

              Comment


              • #8
                Re: add domain user to local admin

                Originally posted by devil786 View Post
                Right click on My Computer, select Manage and then Under Local Users and Groups, expand groups , double click Administrators Group add the user under the Members tab.
                now do this for, say, 100 servedrs.. and tell me if you can think of a better way
                Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

                Comment


                • #9
                  Re: add domain user to local admin

                  None of them will work on a DC as it doesn't have local groups.

                  Comment


                  • #10
                    Re: add domain user to local admin

                    This is a good page to check out.

                    Small scale or for just a few users you can use the method tehcamel suggested, or, for a larger scale, you can create a GPO on the domain controller, then edit the restricted groups to add that user to the local admins group. Remember to add the domain admins and local admin as well if you do this so you don't lose control of the PC.

                    Place that PC in its own OU and link that GPO to that OU. Run gpupdate/force on PC and you should be good to go.

                    In my experience this is a bad idea though. In time the user will eventually be tempted to install stuff and before you know it there are viruses, or other misconfigurations happening and it all gets blamed on you.

                    The page below talks about GPP (Group policy preferences) which goes into even more of a granular method to delegating out administrative rights. You can use GPP and not use the first method of Restricted Groups at all.

                    Either way, good luck and I hope it works out.

                    http://www.windowsecurity.com/articl...y-Desktop.html
                    Last edited by Mudd; 5th January 2011, 17:41.

                    Comment


                    • #11
                      Re: add domain user to local admin

                      we created a HELPDESK group on AD

                      with admin rights

                      then created over time groups of users for easy admin

                      then added these user groups as members in the HELPDESK group

                      hope that helps

                      Comment

                      Working...
                      X