Local Admin Access

  • Thread starter Thread starter Mike T
  • Start date Start date
M

Mike T

I have a group for our Helpdesk personell that I have
delegated authority to reset passwords and unlock
accounts. No other permissions are needed for user
accounts. I also want this group to have local admin
rights to their computers or any computer that they log on
to for end-user troubleshooting. I'm trying to give these
users only as much authority as needed. Not sure if this
is a delegation thing or a Group Policy thing. Any help
would be appreciated.
 
If you want your helpdesk staff to be members of the local "Admin" group on
the pc's then you will need to create the following COMPUTER login script.

net localgroup "administrators" "<domain>\<group>" /add

Add that script to the correct GPO under Computer config>windows
settings>scripts.

Philip Nunn
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Local admin accounts gone haywire 8
Allow domain user to change local permissions on domain computers,without have full right on domain 5
Do Not Execute Group Policy for Admins Group 1
\\servername\share logon failure for domain admins 1
Incorrect GPResult result 3
Local Admin Remote Destop Assistance 0
Problems using Restricted Groups 1
password local policy in domain 2

Back
Top