Re: Local Administrator

Paul and kj,

Thank you very much for all your help. I think I've gathered enough
information to start working now.

Best wishes,

Fernando.


"kj" <kj@xxxxxxxxxxx> wrote in message
news:ew$hb8gQGHA.4960@xxxxxxxxxxxxxxxxxxxxxxx
Fernando,

Unfortunately it only appeared in the 2K reskit supplement 1 as I recall.
I would recommend you dig around and find or acquire your license for the
reskit and follow Paul's link to those tools. There are others tools that
are of substantial help and haven't been replaced.

Here's the VBscript (attached) I harvested long ago but haven't tested.
So, use at your own risk until others verify it.

Scripters that follow along this thread, if you follow the link to this
persons site, there are some other interesting scripts. It is a little
difficult to find them though.



--
/kj
"Fernando" <fernando@xxxxxxxxxxxxx> wrote in message
news:uFXoWEdQGHA.5296@xxxxxxxxxxxxxxxxxxxxxxx
Hi kj!

If you you wouldn't mind reposting the VB script, it will be very much
appreciated.

About the cusrmgr.exe, does Windows Server 2003 resource kit comes with
it
as well? Our Domain Controllers and, in general, most of our servers are
2003 now.

Thanks for all your help!

Fernando.

"kj" <kj@xxxxxxxxxxx> wrote in message
news:%230qcylTQGHA.5560@xxxxxxxxxxxxxxxxxxxxxxx
cusrmgr.exe is part of the Windows Server 2000 resource kit. You'll neet
to locate a copy first.

I also found a VB script that adds to the local administrator account.
If
you want it intead I can (re)post it.

--
/kj
"Fernando" <fernando@xxxxxxxxxxxxx> wrote in message
news:%23wVJGDRQGHA.2668@xxxxxxxxxxxxxxxxxxxxxxx

Ok, for some reason I can my XP does not recognise this command. Does
it
only works from a W2K or 2003 server?

Thanks,

Fernando.

"kj" <kj@xxxxxxxxxxx> wrote in message
news:%23dsURitPGHA.564@xxxxxxxxxxxxxxxxxxxxxxx
You're welcome Fernando, and good luck.

--
/kj
"Fernando" <fernando@xxxxxxxxxxxxx> wrote in message
news:eok2uXtPGHA.140@xxxxxxxxxxxxxxxxxxxxxxx
Thanks kj!

That's a hello of a tip and a half!

cheers,

Fernando


"kj" <kj@xxxxxxxxxxx> wrote in message
news:u6nJtzhPGHA.3164@xxxxxxxxxxxxxxxxxxxxxxx
Probably your user only needs some additional permissions to the
file
system and/or registry to accomodate the database updates.

You may opt to just simply do the administrator thing.

So this line adds domain\user1 to the local Administrator group on
Workstation1

cusrmgr -u domain\user1 -m \\workstation1 -alg Administrators

...and this line takes it away.

cusrmgr -u domain\user1 -m \\workstation1 -dlg Administrators


--
/kj
"Fernando" <fernando@xxxxxxxxxxxxx> wrote in message
news:Os9bzXhPGHA.3976@xxxxxxxxxxxxxxxxxxxxxxx
Thank you kj and the rest of you!!

What I need is the users to have, ocasionally, local admin rights
over their own workstations (never the server). The reason for this
is because every time there is an update on the server database,
the
clients try to update the workstation and they need local admin
rights for this.

So if user1 uses workstation1, user2 uses workstation2, and so on,
I
want user1 to have local admin rights over workstation1 so they can
update the client on their local machine.

Hope this all makes sense.

I think both Paul Williams and Paul Bergson approach might help me.
I
have to study this now.

Cheers!!

Fernando


"kj" <kj@xxxxxxxxxxx> wrote in message
news:OJVmziUPGHA.3016@xxxxxxxxxxxxxxxxxxxxxxx
You have a group of 10 users that occasionaly need to be a local
administrator on a single database server?

If that is correct,

Then create a domain security group and add the 10 users to it.

When they need to be local admins on the datatbase server use
cusrmgr.exe to add the group to the local administrators group on
the database server. When the requirment is done, use cusrmgr.exe
to
remove the domain group from the local administrator group.
Obviously if you will need to do this often, two one line batch
files will make life easier.

--
/kj
"Fernando" <fernando@xxxxxxxxxxxxx> wrote in message
news:uNKyRqRPGHA.2036@xxxxxxxxxxxxxxxxxxxxxxx
Hello,

I have 10 users who are using a database client which needs local
administrator rights every time there is an update on the
database
server.

I was thinking on creating a group policy, within an OU, in such
a
way I could give local admin rights to users who are member of
that
group.

Is there a way to set up the AD in such a way that a user can
have
Local Administrator Rights for an specific machine?

Thank you very much,

Fernando.






















.

Relevant Pages

  • Re: Local Administrator
    ... does Windows Server 2003 resource kit comes with it ... I also found a VB script that adds to the local administrator account. ... system and/or registry to accomodate the database updates. ... What I need is the users to have, ocasionally, local admin rights ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Administrator
    ... cusrmgr.exe is part of the Windows Server 2000 resource kit. ... I also found a VB script that adds to the local administrator account. ... What I need is the users to have, ocasionally, local admin rights over ... remove the domain group from the local administrator group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Administrator
    ... system and/or registry to accomodate the database updates. ... What I need is the users to have, ocasionally, local admin rights over ... their own workstations (never the server). ... remove the domain group from the local administrator group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Administrator
    ... does Windows Server 2003 resource kit comes with it ... I also found a VB script that adds to the local administrator account. ... What I need is the users to have, ocasionally, local admin rights ... remove the domain group from the local administrator group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Administrator
    ... system and/or registry to accomodate the database updates. ... What I need is the users to have, ocasionally, local admin rights over ... their own workstations (never the server). ... the domain group from the local administrator group. ...
    (microsoft.public.windows.server.active_directory)