adding local admin rights w/o visiting workstation

[Guest]

Need help!!
I need to add specific authenticated AD users to the local administrator's
group. Is there a way to do this without visiting each workstation?? Any
suggestions would be highly appreciated.

 

[Myweb]

Hello Joey,

Restricted groups are the point.

Create a new group for the local admins in Active directory, easier to add
additional people if necessary.

- Browse to the OU or domain that will contain the computer account objects
- Open "Properties"
- Select the Group Policy Tab
- Create a new Group Policy Object
- Edit the new object
- In the Group Policy MMC, browse to:
Computer Configuration/Windows Settings/Security Settings/Restricted Groups

- Right-Click and choose "Add Group"
Select the new created group and also add the administrator, otherwise
this account do NOT longer have local admin rights.


Best regards

Myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.