Anyone know how to add user to admin local group with gpo

Im with windows 2003 and windows xp^

Thanks

Jac

Jac <(E-Mail Removed)> wrote:
> Anyone know how to add user to admin local group with gpo
>
> Im with windows 2003 and windows xp^
>
> Thanks
>
> Jac

You can use restricted groups (google for that or post in
m.p.windows.group_policy), or specify a computer startup script via GPO that
uses something like:

net localgroup administrators DOMAIN\group /add


I like to create AD security groups called LocalAdmin, LocalPowerUser, and
then I can add them to the requisite groups on the workstations. When I need
to grant someone local <whatever> rights, I just add their domain account to
the AD group & ask them to log out/in.

Note that you really don't want users to run with local admin or power user
rights. I use this only when I need to troubleshoot something, or when
software needs to be installed as the user account.

thanks for the info !

"Lanwench [MVP - Exchange]"
<(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Jac <(E-Mail Removed)> wrote:
>> Anyone know how to add user to admin local group with gpo
>>
>> Im with windows 2003 and windows xp^
>>
>> Thanks
>>
>> Jac
>
> You can use restricted groups (google for that or post in
> m.p.windows.group_policy), or specify a computer startup script via GPO
> that uses something like:
>
> net localgroup administrators DOMAIN\group /add
>
>
> I like to create AD security groups called LocalAdmin, LocalPowerUser, and
> then I can add them to the requisite groups on the workstations. When I
> need to grant someone local <whatever> rights, I just add their domain
> account to the AD group & ask them to log out/in.
>
> Note that you really don't want users to run with local admin or power
> user rights. I use this only when I need to troubleshoot something, or
> when software needs to be installed as the user account.
>