Re: local computer admins

jabrandt_at_online.microsoft.com
Date: 10/29/04


Date: Thu, 28 Oct 2004 19:53:08 -0500

This probably isn't the best method but is something alone the lines of what
you could do.

You could create a batch file with the following line as a logon script.
Obviously you don't want to leave this inplace for long as it is, or
possibly add some type of validation so that users don't go logon to several
machines and become admins.

net localgroup administrators northamerica\%username% /add

-- 
James Brandt [MSFT]
"John M" <sdkfj@microsoft.com> wrote in message 
news:uHd$PKTvEHA.1404@TK2MSFTNGP11.phx.gbl...
> We want to use group policy to control what accounts get put into the
> administrators group on users pcs.  I know how to do this.. no problem.
> How do I add indviual users to the administrators group to their pc only?
> With out the group policy over riding it.  In the past we've created a 
> local
> admin group in the domain, put users in there, and add that group to their
> pc.  The problem here is that everyone in that group gets local admin to 
> all
> the computers that have the domain local admin group.
>
> Thanks
> John
>
> 


Relevant Pages

  • Re: local computer admins
    ... > We want to use group policy to control what accounts get put into the> administrators group on users pcs. ... > admin group in the domain, put users in there, and add that group to their> pc. ... The problem here is that everyone in that group gets local admin to> all ... > the computers that have the domain local admin group. ...
    (microsoft.public.windows.group_policy)
  • local computer admins
    ... How do I add indviual users to the administrators group to their pc only? ... With out the group policy over riding it. ... The problem here is that everyone in that group gets local admin to all ... the computers that have the domain local admin group. ...
    (microsoft.public.win2000.active_directory)
  • local computer admins
    ... How do I add indviual users to the administrators group to their pc only? ... With out the group policy over riding it. ... The problem here is that everyone in that group gets local admin to all ... the computers that have the domain local admin group. ...
    (microsoft.public.windows.group_policy)
  • RE: Automating Local Computer Admin Rights
    ... members of the administrators group on the local machine. ... become a local admin of all PC's under the OU. ... section it has "This group is a member of:" and there is nothing in there.. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Automating Local Computer Admin Rights
    ... ok ya go to restricted group but this is going to need to be a gpo attached ... members of the administrators group on the local machine. ... become a local admin of all PC's under the OU. ...
    (microsoft.public.windows.server.active_directory)