Re: How do I...

Hi there

It depends on what you mean. If you want *any* user who is able to log in
to a given machine to be an administrator of that machine while they are sat
at the console, I have a good solution. It is to run the command "net
localgroup administrators interactive /add" as a computer startup script (so
that it runs in the system context).

If, however, you subscribe to the notion that each PC belongs to a primary
user and that each user only logs in to their own PC, then there isn't
really an easy way to automate this.

Microsoft KB article 320065 (as referred to by Jerold) is really only
suitable for trusted administrators needing admin access across all
workstations. If your users are even slightly clever, and you implement
this solution, your users could find out how to do things like:

* Take screenshots of other users' screens.
* Run arbitrary processes on other users' machine.
* Run VNC (or equivalent remote control package) on other users' machines.

All the above can be achieved without having physical access to the machine,
so be careful to think through what it is you are asking for and what it is
you choose to implement.

Hope this helps

Oli




"Peter Downes" <pjtdownes@xxxxxxxxxxx> wrote in message
news:umvpDpejFHA.3608@xxxxxxxxxxxxxxxxxxxxxxx
> How do I create a group policy that will add the user that logs onto a PC
> into the local administrators group on that PC?
>
>


.

Relevant Pages

  • Re: How do I...
    ... > localgroup administrators interactive /add" as a computer startup script ... > * Take screenshots of other users' screens. ... >> How do I create a group policy that will add the user that logs onto a PC ... >> into the local administrators group on that PC? ...
    (microsoft.public.win2000.group_policy)
  • Re: Login Script
    ... So your syntax would be: ... That would add ANY user that logs into the computer into the administrators' ... >> member of the "workstation admins" group. ...
    (microsoft.public.win2000.active_directory)
  • Re: Outlook web Access
    ... the only problem is - it is one of the Administrators who is logging ... when he/ anyone else logs in on my account. ... employer's network and the employer's computers, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Log-in
    ... You get an error message? ... It logs you out? ... "Confused doctor" wrote in ... > Why can no one but administrators sign in on this one computer. ...
    (microsoft.public.windows.server.general)
  • Re: Local Administrator on laptop has too much access
    ... The allows domain administrators to also be administrators on ... Being in the local administrators group on any domain ... laptops that has the same user logon name/password as their domain account ...
    (microsoft.public.win2000.security)
Loading