Re: Local Administrator

Hi kj!

If you you wouldn't mind reposting the VB script, it will be very much
appreciated.

About the cusrmgr.exe, does Windows Server 2003 resource kit comes with it
as well? Our Domain Controllers and, in general, most of our servers are
2003 now.

Thanks for all your help!

Fernando.

"kj" <kj@xxxxxxxxxxx> wrote in message
news:%230qcylTQGHA.5560@xxxxxxxxxxxxxxxxxxxxxxx
cusrmgr.exe is part of the Windows Server 2000 resource kit. You'll neet
to locate a copy first.

I also found a VB script that adds to the local administrator account. If
you want it intead I can (re)post it.

--
/kj
"Fernando" <fernando@xxxxxxxxxxxxx> wrote in message
news:%23wVJGDRQGHA.2668@xxxxxxxxxxxxxxxxxxxxxxx

Ok, for some reason I can my XP does not recognise this command. Does it
only works from a W2K or 2003 server?

Thanks,

Fernando.

"kj" <kj@xxxxxxxxxxx> wrote in message
news:%23dsURitPGHA.564@xxxxxxxxxxxxxxxxxxxxxxx
You're welcome Fernando, and good luck.

--
/kj
"Fernando" <fernando@xxxxxxxxxxxxx> wrote in message
news:eok2uXtPGHA.140@xxxxxxxxxxxxxxxxxxxxxxx
Thanks kj!

That's a hello of a tip and a half!

cheers,

Fernando


"kj" <kj@xxxxxxxxxxx> wrote in message
news:u6nJtzhPGHA.3164@xxxxxxxxxxxxxxxxxxxxxxx
Probably your user only needs some additional permissions to the file
system and/or registry to accomodate the database updates.

You may opt to just simply do the administrator thing.

So this line adds domain\user1 to the local Administrator group on
Workstation1

cusrmgr -u domain\user1 -m \\workstation1 -alg Administrators

...and this line takes it away.

cusrmgr -u domain\user1 -m \\workstation1 -dlg Administrators


--
/kj
"Fernando" <fernando@xxxxxxxxxxxxx> wrote in message
news:Os9bzXhPGHA.3976@xxxxxxxxxxxxxxxxxxxxxxx
Thank you kj and the rest of you!!

What I need is the users to have, ocasionally, local admin rights
over their own workstations (never the server). The reason for this
is because every time there is an update on the server database, the
clients try to update the workstation and they need local admin
rights for this.

So if user1 uses workstation1, user2 uses workstation2, and so on, I
want user1 to have local admin rights over workstation1 so they can
update the client on their local machine.

Hope this all makes sense.

I think both Paul Williams and Paul Bergson approach might help me. I
have to study this now.

Cheers!!

Fernando


"kj" <kj@xxxxxxxxxxx> wrote in message
news:OJVmziUPGHA.3016@xxxxxxxxxxxxxxxxxxxxxxx
You have a group of 10 users that occasionaly need to be a local
administrator on a single database server?

If that is correct,

Then create a domain security group and add the 10 users to it.

When they need to be local admins on the datatbase server use
cusrmgr.exe to add the group to the local administrators group on
the database server. When the requirment is done, use cusrmgr.exe to
remove the domain group from the local administrator group.
Obviously if you will need to do this often, two one line batch
files will make life easier.

--
/kj
"Fernando" <fernando@xxxxxxxxxxxxx> wrote in message
news:uNKyRqRPGHA.2036@xxxxxxxxxxxxxxxxxxxxxxx
Hello,

I have 10 users who are using a database client which needs local
administrator rights every time there is an update on the database
server.

I was thinking on creating a group policy, within an OU, in such a
way I could give local admin rights to users who are member of that
group.

Is there a way to set up the AD in such a way that a user can have
Local Administrator Rights for an specific machine?

Thank you very much,

Fernando.

















.

Relevant Pages

  • Re: Local Administrator
    ... I also found a VB script that adds to the local administrator account. ... only works from a W2K or 2003 server? ... What I need is the users to have, ocasionally, local admin rights ... remove the domain group from the local administrator group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Administrator
    ... does Windows Server 2003 resource kit comes with it ... I also found a VB script that adds to the local administrator account. ... system and/or registry to accomodate the database updates. ... What I need is the users to have, ocasionally, local admin rights ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Administrator
    ... cusrmgr.exe is part of the Windows Server 2000 resource kit. ... I also found a VB script that adds to the local administrator account. ... What I need is the users to have, ocasionally, local admin rights over ... remove the domain group from the local administrator group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Administrator
    ... system and/or registry to accomodate the database updates. ... What I need is the users to have, ocasionally, local admin rights over ... their own workstations (never the server). ... remove the domain group from the local administrator group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Administrator
    ... system and/or registry to accomodate the database updates. ... What I need is the users to have, ocasionally, local admin rights over ... their own workstations (never the server). ... the domain group from the local administrator group. ...
    (microsoft.public.windows.server.active_directory)
Loading