Re: Group Policy Question

Tech-Archive recommends: Fix windows errors by optimizing your registry

Howdie!

Don schrieb:
I have around a thousand pc's which are already in production, but not members of our AD domain. I plan on adding them by pushing a script using the netdom utility. My problem is we have several applications which require the users to be local admins on the pc's (bad I know). Is there a way via a group policy, or anything else for that matter, which will add the users to the local administrator group the first time they log on. My alternative is to add the domain users group from the netdom script, but I really want to restrict it to individual users.

There's nothing for exactly what you want. You will have to script it somehow that people get added to the local admins as soon as they log in.

If that doesn't work, and before you start adding them with a net* script, have a look at restricted groups:

http://www.frickelsoft.net/blog/?p=13

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
.

Relevant Pages

  • Re: From Workgroup to Domain
    ... Gibraltar skrev: ... You can use these WMI lines in a VB Script ... Alternately as Jorge said you can use netdom utility but again you need copy ... "Jorge Silva" wrote: ...
    (microsoft.public.windows.server.active_directory)
  • Group Policy Question
    ... I plan on adding them by pushing a script using the netdom utility. ... Is there a way via a group policy, or anything else for that matter, which will add the users to the local administrator group the first time they log on. ... My alternative is to add the domain users group from the netdom script, but I really want to restrict it to individual users. ...
    (microsoft.public.win2000.active_directory)
  • Re: From Workgroup to Domain
    ... when i run the script I get an objet "objwmiservice" i necessary. ... Gibraltar skrev: ... Alternately as Jorge said you can use netdom utility but again you need copy ... "Jorge Silva" wrote: ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Migration (NT4 to W2k3)
    ... I know it would be nice to script the migration process, but honestly, ... the Windows 2003 Active Directory Migration Tool will perform ... using the netdom utility. ...
    (microsoft.public.scripting.vbscript)
  • Re: Add User to Local Administrators Group
    ... Run script as Domain admin user ... to test create Ou in AD for example "Test", add one or more computers, ... user to the remote workstations Administrators group. ... that erased all of the local admins except the Domain Admin group. ...
    (microsoft.public.scripting.vbscript)