Re: List users in local administrators group on remote machine


"Nick" <Nick@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0E9F1D7C-E802-4E55-9935-AEF28B15E8EC@xxxxxxxxxxxxxxxx
Hi,

I am looking to manage all desktops on our network with regard to the
local
administrators group. There are several things I am looking to
accomplish:

1. list all users (domain and local) in local administrators group on
multiple remote computers
2. remove user from local administrators group on remote computer
3. add domain user account to local administrators group on remote
computer
4. remove local user account from remote computer
5. Report on current members of the local administrators group.

Any assistance you can provide would be greatly appreciated.
We have .Net software if that would be the best way to tackle this but I
am
not sure which way to go.

Thanks!
Nick

You could do the whole lot with the inbuilt net.exe command:
1. net localgroup administrators
2. net localgroup administrators nick /delete
3. net localgroup administrators Domainname\nick /add
4. net user %ComputerName%\nick /delete
5. Same as 1. above.

To run the commands on a remote computer, put them into a batch file, then
invoke the batch file with psexec.exe (www.sysinternals.com) under your
domain admin account.


.

Relevant Pages

  • Re: Scripting questions
    ... which is a member of the local Administrators group on computer "WST101". ... Bind to the local administrators group on the remote computer and use the ...
    (microsoft.public.windows.server.scripting)
  • Re: Local PC administration
    ... object to the local Administrators group on each PC. ... Administrators group on each Domain PC. ... Workstation Admins) a member. ...
    (microsoft.public.win2000.active_directory)
  • Re: restricted groups for local admin rights
    ... > user to the local administrators group on that computer. ... >> First off be sure to use Restricted Groups at the Organizational Unit ... >>> I have read several articles on how to do it but it is confusing to me. ...
    (microsoft.public.windows.group_policy)
  • Re: Win 2003 Local Admin Problem
    ... You should have defined a built-in Administrators group as a restricted ... I added the local administrators group on my PC. ... Windows Server - Directory Services ... >>>> You can use Restricted Groups feature of the GP to add Domain Admins ...
    (microsoft.public.windows.group_policy)
  • Re: Help needed setting up roaming administrator
    ... Another option is a "startup" script implemented via Group Policy to ... computers within the scope of influence of the policy such as the Organizational Unit ... Administrators group use. ... > default users and groups in the local Administrators group. ...
    (microsoft.public.win2000.security)
Loading