Re: How do I get admin rights for all objects in a OU?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Sigurjon (6944804_at_talnet.is)
Date: 06/28/04 

Date: 28 Jun 2004 03:11:30 -0700

Thanks Alex.
Yes that's right, I want to have admin rights on the computers
withuout being in the Security Group Domain Admins.
I read about using bat login scripts to do this. But you know what? I
have to be Domain Admin if I want to make it work. That is, to be able
to add my self (the domain account) to the local administrators group
I have to be member of Domain Admins to have the rights to do that.
I guess I will in the end make a superuser, not my primary account,
make him Domain Admin while I log on all the computers and make that
user local admin with the logon script. I guess that is the best way
to do this.

Thanks for your reply.

Sigurjon, Iceland.

"Alex" <Yukon@nospam.nospam> wrote in message news:<#VT1Fs4WEHA.3420@TK2MSFTNGP12.phx.gbl>...
> I am not sure I understand your question but it seems like you wanted to
> have administrative right on the client's computer. If that's what you
> want, you have to add your domain account to each client's computer. You
> can do that via logon script.
>
> Example: net localgroup Administrators YourDomain\YourAccount /add
>
> Alex
> MCSE, MCDBA, MCSD

Relevant Pages

  • Re: How do I get admin rights for all objects in a OU?
    ... startup script not login script ... > Thanks Alex. ... I want to have admin rights on the computers ... > I have to be member of Domain Admins to have the rights to do that. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Active directory Group Policy (Win2k)
    ... When I enforce the policy onto the computers in the new OU, ... Domain Admins so the Domain Admins cannot view ... workstations, to access Microsoft Office. ...
    (microsoft.public.security)
  • Re: Domain Admin administering Domain Computers
    ... Is there are procedure or script for the Domain Admins to regain full access to the Computers and Servers joined in the Domain? ...
    (microsoft.public.windows.server.scripting)
  • Re: Group Policy setting for restricting creation of local user accounts
    ... if DA was not in each machine's local Administrators ... group that mimics domain admins rights minus the right to create local ... being able to create accounts on the computers. ... local computer user accounts when the computer is joined to the ...
    (microsoft.public.windows.group_policy)
  • Some users unable to log into domain.
    ... Testing to slowly move over 40-50 computers to a domain.. ... I can switch back to the reduced access account and it does work ... Ive tried two logins featured under the domain admins group, ...
    (microsoft.public.windows.server.active_directory)