Re: Can I add myself to Administrators group of all PCs when I log in?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: neo [mvp outlook] (neo_at_online.mvps.org)
Date: 02/16/05 

Date: Wed, 16 Feb 2005 04:50:33 -0800

Actually your thought process concerning the add to group via a logon script
will not work. For example, if the user is added to the administrators
group at the time s/he is logging in, they still retain whatever permissions
they have on said machine. The permission change wouldn't take effect until
the next logon (e.g. perform a run as would get the new rights but the
existing session would not.)

However, you can perform this add a multitude of ways using a domain group
policy object. You could go the route of using a restricted group group
policy object that adds users/groups to the local administrators group or
use a computer startup script that does the same function by using the NET
LOCALGROUP command.

/neo

ps - if the first paragraph is a bit confusing on what i'm describing, take
a peek at this blog.
http://blogs.msdn.com/aaron_margosis/archive/2004/07/24/193721.aspx

<it.ees@ltees.com> wrote in message
news:1108555311.702623.91090@z14g2000cwz.googlegroups.com...
> Hi
> I am a newbie and just playing with scripts. I have been given a
> strange request by my IT manager...that is whenever he logs in using
> his domain login into any PC of that domain, he should have the admin
> privilages. But I should not make him Domain admin, or Enterprise
> Admin. I think I can make a script which will run when he logs in and
> will add him to the administrators group of that PC. And when he logs
> off he is out of that group. Will that work? I feel to add him to
> that group he will need admin privilegs. Can anybody help???
>
> Thanx
> Manoj
>

Relevant Pages

  • SUMMARY WAS: OT? Philosophical Question on SA responsibilities
    ... helpful for managers interested in hiring new administrators. ... Would you go thru the 14,600 messages in root and admin ... If I was a new SA I would if encountering a security hole, ... I can see some use for the passwd -s part of the crontab script, ...
    (SunManagers)
  • Cmd promt wrong character in unattend script
    ... I want to add a new user called admin, and put him in the administrators ... script like start.cmd or .bat file the administrators group becomes ... the command promt directly. ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: How to know if a user has administrative privileges
    ... ("Administrators" is a different group in French, Spanish, German etc....) ... but I don't think the way to check local admin group is ... script will say I'm NOT admin. ...
    (microsoft.public.scripting.vbscript)
  • Re: How to disable user login script, when users login terminal server?
    ... If you are admin: Let's say your server name is RAMBO, then in the begining ... of the logon script, add: ... You can't stop the script if you login to the domain. ...
    (microsoft.public.windows.terminal_services)
  • Re: IP Address
    ... > following script from the user's login script (they are ... > not administrators). ... > admin. ... > vbscript from the user's login script to change to DHCP. ...
    (microsoft.public.windows.server.scripting)