how to add user to admin local group with gpo

  • Thread starter Thread starter Jac
  • Start date Start date
J

Jac

Anyone know how to add user to admin local group with gpo

Im with windows 2003 and windows xp^

Thanks

Jac
 
Jac said:
Anyone know how to add user to admin local group with gpo

Im with windows 2003 and windows xp^

Thanks

Jac
Click to expand...

You can use restricted groups (google for that or post in
m.p.windows.group_policy), or specify a computer startup script via GPO that
uses something like:

net localgroup administrators DOMAIN\group /add


I like to create AD security groups called LocalAdmin, LocalPowerUser, and
then I can add them to the requisite groups on the workstations. When I need
to grant someone local <whatever> rights, I just add their domain account to
the AD group & ask them to log out/in.

Note that you really don't want users to run with local admin or power user
rights. I use this only when I need to troubleshoot something, or when
software needs to be installed as the user account.
 
Back
Top