Re: Local administrator access group policy

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Renee Geffre [ MSFT] (reneeg_at_online.microsoft.com)
Date: 04/25/04 

Date: Sun, 25 Apr 2004 00:58:59 GMT

Hi Dan:

Thank you for contacting Microsoft Newsgroup Support. As I understand it,
you want to give each user Local Administrator rights on their workstations
using Group Policy, pushed from the server. Using group policy to do this
can be complicated and can only work with groups so you would end up with
all the domain users have local administrator rights on all the
workstations. What you can do is create a script that uses the Net group
command with a variable for the user name to add them to the local
Administrators account. The command would be:

net localgroup administrators %usersdomain%\%username% /add

This will take the currently logged on user and add them to the Local
Administrators group on the workstation. You can run the script at logon.
The following is an article that describes how to assign logon scripts.

322241 HOW TO: Assign Scripts in Windows 2000
http://support.microsoft.com/?id=322241

Best Regards,

Renee Geffre, Windows 2000 MCSE, MCSA
Microsoft Online Support Engineer

Get Secure! - www.microsoft.com/security

========================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

========================================================
This posting is provided "As Is" with no warranties, and confers no rights.

Relevant Pages

  • Corupted Profiles?
    ... 15 WinXPPro workstations and one SBS2003 Std server. ... Occasionally users log on to their workstations and are told of a corrupted ... profile. ... users do have local accounts with local administrator rights on their ...
    (microsoft.public.windows.server.sbs)
  • Re: What is the quickest way to do this
    ... GPO or MUST (i don't know scripts) i use a script? ... workstations how long does it take for the settings to take effect by ... FORCE is only nessesary if you want to REDEPLOY an applied GPO. ... Mark Heitbrink - MVP Windows Server - Group Policy ...
    (microsoft.public.windows.group_policy)
  • Re: GPO uninstall script
    ... I have a Windows 2003 domain and few workstations joined to the domain. ... Now I want to use a script - that must be executed within GPO Default ... scripts" appear before logon window but nothing is happened. ... If you post Group Policy questions where the Group Policy gurus hang out, ...
    (microsoft.public.office.misc)
  • Re: Configuring Desktop Policy
    ... I am still studing how implement the microsoft domain (login script, policy, etc), but I have to put some workstations in the domain as fast as I can for a system that requires workstations on a windows 2003 domain. ... Check out the Group Policy Technical Resources sites as well as the "Resource Kit" books about Group Policy. ...
    (microsoft.public.windows.group_policy)
  • [Full-Disclosure] W2k users, local admin rights and GPOs
    ... a W2k user with local administrator rights can prevent group policy ... been granted local admin rights and I'm trying to convince the ... relevant domain admins that, while this is an easy way to make legacy ...
    (Full-Disclosure)