re: Local Administrator membership

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hello all;

Here's what I want and why...

I've inherited an Active Directory forest. I need to add a member to each
local administrator group for every machine in my forest without modifying
the existing membership of the local administrators group (ie - I'm pretty
sure that means I can't use the Restricted Groups in the GPO). I know I can
use the 'startup scripts' in the GPO to force this the next time a machine
restarts but I'm hoping for something more immediate and at least more
permanent....

so I guess part of my question is can I modify the AD schema so that
whenever a new machine is joined to the domain not only does Domain Admins
get added to the local admin group but other 'pre-defined' members are added
as well - and can anyone think of a better way to do the same thing but for
existing computers.

Thanks!
Eddie


.

Relevant Pages

  • Prevent users from leaving the Domain
    ... and joining a Workgroup. ... local Administrator group. ... member of the local Admin group it don't work. ...
    (microsoft.public.windowsxp.help_and_support)
  • Prevent Users from leaving the Domain
    ... and joining a Workgroup. ... local Administrator group. ... member of the local Admin group it don't work. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Member of Local Admin Group
    ... > Advanced user Management> Advanced button ... I intended to have the new user use the CLIENTSVC system. ... >> that the user is not a member of local administrator group. ...
    (microsoft.public.windows.server.sbs)
  • Re: Administrators not getting Administrator rights
    ... > client a member of the local Administrator group, ... Did you make the clients domain account a member of the admin group or their ...
    (microsoft.public.win2000.security)