Re: Copy Security Group to all domain PCs

Hi Alan,

If you would like to make a group of users only local administrators on the
computers in e.g. domain then add domain group with these users to Local
Administrators group on the computers. To do this, I usually do it is by
using a script like this

net localgroup administrators "Domain\Local_Admins" /add

Replace Domain with netbios name of domain where and Local_Admins is domain
group where your users who need to be local admins are located. Put above
command in batch file and run it as _startup script_ (not logon script).

This will make members of Local_Admins group local administrators on the
computers where script will run, while they won't be domain administrators.

I hope it helps you out,

--
Mike
Microsoft MVP - Windows Security

"Alan Byrne" <AlanByrne@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C92E8798-023C-4A2B-8588-94422E25E6FE@xxxxxxxxxxxxxxxx
Hi, I need to copy a group to all PCs local administrators group within my
domain of about 100 computers.

Is there a way I can do this via GP or another way?

The aim is basically to have a computer localadministratos group so I can
add certain people to this group and they will auto have local admin
rights
on all computers except servers.

Thanks


.

Relevant Pages

  • Re: Add User to Local Administrators Group
    ... Run script as Domain admin user ... to test create Ou in AD for example "Test", add one or more computers, ... user to the remote workstations Administrators group. ... that erased all of the local admins except the Domain Admin group. ...
    (microsoft.public.scripting.vbscript)
  • Re: I need to give an AD user the ability to install SW on PCs
    ... user logging in would have to have local Administrators access to add ... Maybe startup script would work but I ... Just slap the computers in question in comps.txt (grab your computers from ... Have you already had a look at "Restricted Groups"? ...
    (microsoft.public.windows.group_policy)
  • Re: Add domain user to local group script troubleshoot
    ... This script looks like it would be extremely helpful. ... changing domains and we have the old group in the local admins, ... > and thus my Computers OU underneath, but am not a domain admin and so am ... > practice would be to add a domain group to the local Administrators group ...
    (microsoft.public.windows.server.scripting)
  • Problem with the following script.
    ... I use the following script to add a domain group to the local administrators ... group on local computers. ...
    (microsoft.public.windows.server.scripting)
  • Re: User type
    ... If you would like to make a group of users only local administrators on the ... created to Local Administrators group on the computers. ... The way I usually do it is by using a script like this ... > to the Domanin Admin group? ...
    (microsoft.public.windows.server.setup)
Loading