Re: Local Administrator

Probably your user only needs some additional permissions to the file system
and/or registry to accomodate the database updates.

You may opt to just simply do the administrator thing.

So this line adds domain\user1 to the local Administrator group on
Workstation1

cusrmgr -u domain\user1 -m \\workstation1 -alg Administrators

....and this line takes it away.

cusrmgr -u domain\user1 -m \\workstation1 -dlg Administrators


--
/kj
"Fernando" <fernando@xxxxxxxxxxxxx> wrote in message
news:Os9bzXhPGHA.3976@xxxxxxxxxxxxxxxxxxxxxxx
Thank you kj and the rest of you!!

What I need is the users to have, ocasionally, local admin rights over
their own workstations (never the server). The reason for this is because
every time there is an update on the server database, the clients try to
update the workstation and they need local admin rights for this.

So if user1 uses workstation1, user2 uses workstation2, and so on, I want
user1 to have local admin rights over workstation1 so they can update the
client on their local machine.

Hope this all makes sense.

I think both Paul Williams and Paul Bergson approach might help me. I have
to study this now.

Cheers!!

Fernando


"kj" <kj@xxxxxxxxxxx> wrote in message
news:OJVmziUPGHA.3016@xxxxxxxxxxxxxxxxxxxxxxx
You have a group of 10 users that occasionaly need to be a local
administrator on a single database server?

If that is correct,

Then create a domain security group and add the 10 users to it.

When they need to be local admins on the datatbase server use cusrmgr.exe
to add the group to the local administrators group on the database
server. When the requirment is done, use cusrmgr.exe to remove the domain
group from the local administrator group. Obviously if you will need to
do this often, two one line batch files will make life easier.

--
/kj
"Fernando" <fernando@xxxxxxxxxxxxx> wrote in message
news:uNKyRqRPGHA.2036@xxxxxxxxxxxxxxxxxxxxxxx
Hello,

I have 10 users who are using a database client which needs local
administrator rights every time there is an update on the database
server.

I was thinking on creating a group policy, within an OU, in such a way I
could give local admin rights to users who are member of that group.

Is there a way to set up the AD in such a way that a user can have Local
Administrator Rights for an specific machine?

Thank you very much,

Fernando.







.

Relevant Pages

  • Re: Local Administrator
    ... I also found a VB script that adds to the local administrator account. ... only works from a W2K or 2003 server? ... What I need is the users to have, ocasionally, local admin rights ... remove the domain group from the local administrator group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Administrator
    ... does Windows Server 2003 resource kit comes with it ... I also found a VB script that adds to the local administrator account. ... system and/or registry to accomodate the database updates. ... What I need is the users to have, ocasionally, local admin rights ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Administrator
    ... system and/or registry to accomodate the database updates. ... You may opt to just simply do the administrator thing. ... What I need is the users to have, ocasionally, local admin rights over ... the domain group from the local administrator group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Administrator
    ... system and/or registry to accomodate the database updates. ... What I need is the users to have, ocasionally, local admin rights over ... their own workstations (never the server). ... the domain group from the local administrator group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Administrator
    ... system and/or registry to accomodate the database updates. ... What I need is the users to have, ocasionally, local admin rights over ... their own workstations (never the server). ... remove the domain group from the local administrator group. ...
    (microsoft.public.windows.server.active_directory)
Loading