batch add global group to local group

[Dawn Bouton]

I am wondering if there is an easier way to add a global group to
about 1000 workstations local admins group. Because of our
environment we cannot create a Group Policy in Restricted groups. We
need to have some users be local administrators on their own pc and it
is different throughout our environment. The way we did it originally
was create an image with 2 domain administrative groups set in local
admins group and when we imaged it was like that for all our pc's. We
now had to create another "repair group" and we need to add this group
in the local group of all our pc's.

I can do this manually but would like to create a batch file to
automate it. The net localgroup administrators domain\name /add works
fine for the one machine you are on but is there a way to specify
which machine name you want to do this for? Any help is greatly
appreciated.

Dawn

 

[Brian Desmond [MVP]]

Dawn-

How about assigning a startup script to the appropriate machines with the
net localgroup command? You could filter the GPO to a security group of
machines if you want.

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com

 

[Buz [MSFT]]

Here is how to add a domain global group to the local administrators group.

net localgroup Administrators "NetBIOSdomainname\group name" /add

To remove that level of access, use the same syntax with the /delete switch.

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.



<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
<>