Adding a domain account as a local admin account

[OJ]

I want to add a domain account to be a local
administrator in all my W2k/XP clients. How can i
achieved that..I have ADS on W2k AdV sp4.
thanks

 

[Jerold Schulman]

I want to add a domain account to be a local
administrator in all my W2k/XP clients. How can i
achieved that..I have ADS on W2k AdV sp4.
thanks

Group Policy Restricted Groups, tip 5319 in the 'Tips & Tricks' at
http://www.jsiinc.com

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

 

[Cary Shultz [A.D. MVP]]

Good morning!

And I can not stress enough how important it is to heed the
warning/suggestion from step three! From that point forward do it from a
WIN2000 Pro system with the ADMINPAK installed! Otherwise you will have a
lot of fun! You can do it, it is just much more difficult! There are a lot
of posts in here about how so very difficult setting up Restricted Groups
is. Turns out in 99% of the cases that the poster did not follow the
instructions. So it really was a matter of RTFM. Also, please know that
when you do this you are going to flush out all of the users and groups that
are currently members of the local Administrators group. So, if you are
going to do this then I would suggest that you add two groups: the group
which consists of the users that you want as well as the Domain Admins!

Also, what is it that you need to do where a domain user account object
needs to be a member of the local Administrators group? This is usually not
such a great idea. Maybe there is another solution.

HTH,

Cary

PS You could also probably do it from a WINXP System.

 

[Mike]

The two following article outline adding domain groups to
local groups. Read them carefully, as OS version and SP
version makes a big difference.
In our case, we use Group Policy scripting to force domain
admins group be added to local administrators group when
needed. Hope this helps.
Mike

http://support.microsoft.com/default.aspx?scid=kb;en-
us;810076&Product=win2000

http://support.microsoft.com/default.aspx?scid=kb;en-
us;555026