Re: How do I get admin rights for all objects in a OU?

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 07/01/04


Date: Wed, 30 Jun 2004 18:00:41 -0700

startup script not login script

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Sigurjon" <6944804@talnet.is> wrote in message
news:eba5e4d3.0406280211.769aa633@posting.google.com...
> Thanks Alex.
> Yes that's right, I want to have admin rights on the computers
> withuout being in the Security Group Domain Admins.
> I read about using bat login scripts to do this. But you know what? I
> have to be Domain Admin if I want to make it work. That is, to be able
> to add my self (the domain account) to the local administrators group
> I have to be member of Domain Admins to have the rights to do that.
> I guess I will in the end make a superuser, not my primary account,
> make him Domain Admin while I log on all the computers and make that
> user local admin with the logon script. I guess that is the best way
> to do this.
>
> Thanks for your reply.
>
> Sigurjon, Iceland.
>
> "Alex" <Yukon@nospam.nospam> wrote in message
news:<#VT1Fs4WEHA.3420@TK2MSFTNGP12.phx.gbl>...
> > I am not sure I understand your question but it seems like you wanted to
> > have administrative right on the client's computer.  If that's what you
> > want, you have to add your domain account to each client's computer.
You
> > can do that via logon script.
> >
> > Example: net localgroup Administrators YourDomain\YourAccount /add
> >
> > Alex
> > MCSE, MCDBA, MCSD


Relevant Pages

  • Re: How do I get admin rights for all objects in a OU?
    ... I want to have admin rights on the computers ... withuout being in the Security Group Domain Admins. ... I have to be member of Domain Admins to have the rights to do that. ... user local admin with the logon script. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Admin administering Domain Computers
    ... Is there are procedure or script for the Domain Admins to regain full access to the Computers and Servers joined in the Domain? ...
    (microsoft.public.windows.server.scripting)
  • Re: Finding users in local admin groups
    ... > Here is a vbscript that you can run against a remote computer that moves ... > *local* users except 'Administrator) from the Administrators group to the ... You should also add to the script logging to a file of the ... > you moved on what computers. ...
    (microsoft.public.win2000.security)
  • Re: Change local administrator password ? through GPO or push script ?
    ... I would like to change the local administrator password of every computers member of my AD domain but I am not sure of the best method. ... Create a vbs script that points to the local computer and then deploy this script by GPO. ... This attribute will permit to know wich admin password is configured for this machine. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Not so Newbie
    ... The script is designed for situations like yours. ... wit 35+ computers and to go to each of those computers to individualy ... Prompt for an executable to run on each remote computer in the group. ... so you know where the deployment failed. ...
    (microsoft.public.windows.server.scripting)