Re: User type

Ok - I'm confused.

Are you telling me to create the Local_Admins folder on the domain (as a
domain group) under active directory and then go to each computer aand add
the startup command line to the local policy?

or

Do I do it all on the local computer/client?

I was hoping for a simple - one step for all- solution. I am constantly
changing the users in this group.

thx
"Miha Pihler [MVP]" <mihap-news@xxxxxxxxxxx> wrote in message
news:%23DWLxbDnFHA.3256@xxxxxxxxxxxxxxxxxxxxxxx
> Hi,
>
> If you would like to make a group of users only local administrators on
> the computers in e.g. domain then add domain group with these yours that
> you created to Local Administrators group on the computers. You can do it
> manually or using script
>
> The way I usually do it is by using a script like this
>
> net localgroup administrators "Domain\Local_Admins" /add
>
> Replace Domain with netbios name of domain where and Local_Admins is
> domain group where your users who need to be local admins are located.
> Put above command in batch file and run it as startup script (not logon
> script).
>
> This will make members of Local_Admins group local administrators on the
> computers where script will run, while they won't be domain
> administrators.
>
> I hope it helps you out,
>
> --
> Mike
> Microsoft MVP - Windows Security
>
>
> "John Leonard - Sage" <sagegrp@xxxxxxxxxxxx> wrote in message
> news:OG93AtBnFHA.3448@xxxxxxxxxxxxxxxxxxxxxxx
>> How do I setup a group of users, to be administrators, without adding
>> them to the Domanin Admin group?
>>
>
>


.

Relevant Pages

  • Re: I need to give an AD user the ability to install SW on PCs
    ... user logging in would have to have local Administrators access to add ... Maybe startup script would work but I ... Just slap the computers in question in comps.txt (grab your computers from ... Have you already had a look at "Restricted Groups"? ...
    (microsoft.public.windows.group_policy)
  • Problem with the following script.
    ... I use the following script to add a domain group to the local administrators ... group on local computers. ...
    (microsoft.public.windows.server.scripting)
  • Re: User type
    ... If you would like to make a group of users only local administrators on the ... created to Local Administrators group on the computers. ... The way I usually do it is by using a script like this ... > to the Domanin Admin group? ...
    (microsoft.public.windows.server.setup)
  • Re: Copy Security Group to all domain PCs
    ... If you would like to make a group of users only local administrators on the ... Administrators group on the computers. ... group where your users who need to be local admins are located. ... command in batch file and run it as _startup script_. ...
    (microsoft.public.windows.server.general)
  • Re: Finding users in local admin groups
    ... > Here is a vbscript that you can run against a remote computer that moves ... > *local* users except 'Administrator) from the Administrators group to the ... You should also add to the script logging to a file of the ... > you moved on what computers. ...
    (microsoft.public.win2000.security)
Loading