Making a domain account a local admin wherever it is used?

M

mulhollands

Hello, I wonder if someone could help me.

We wish to make one particular user a local admin on whatever
workstation he logs on to. He wanders about the organisation quite a
lot :)

Running W2K/2003 server, XP SP2 workstations.

Is there any way to do this?

Thanks

Stephen
 
S

Steven L Umbach

There are a couple of ways to do this - using Group Policy Restricted Groups
or a Group Policy "startup" script that uses the net localgroup command that
adds the domain user to the administrators group. See the link below on how
to use Restricted Groups with the "member of" option which requires that the
Windows 2000 domain controllers be SP4 to work correctly. You would want to
use Restricted Groups at the OU level in your situation and not the domain
container. The OU would contain the computers that you want Restricted
Groups to apply to. --- Steve

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html
 
M

mulhollands

Steven said:
There are a couple of ways to do this - using Group Policy Restricted Groups
or a Group Policy "startup" script that uses the net localgroup command that
adds the domain user to the administrators group. See the link below on how
to use Restricted Groups with the "member of" option which requires that the
Windows 2000 domain controllers be SP4 to work correctly. You would want to
use Restricted Groups at the OU level in your situation and not the domain
container. The OU would contain the computers that you want Restricted
Groups to apply to. --- Steve

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

Thank you very much for that, Steve.

Stephen
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top