script member ship change

[Bob]

I created a Help Desk group with a few members. what i'd like to create an
MMC to limite my help desk staff to be able to administer local machines
only.

Is there a way i can script out the adding of this A/D group to the local
administrators group on our w2k machines instead of having to manually add
this?

thanks!

 

[Amanda Wang [MSFT]]

Hi Bob,

Thanks for your post.

I understand that you want to know if there is a way you can script out the
adding of this A/D group to the local administrators group on your W2K
machines instead of having to manually add this.

Based on my research, you can try to fulfill the function by using the
following steps:

1. Use "net user" command to add the Help Desk group to the local
administrators group on each client.

Run the following on a DC with correct group membership and one with empty
membership for the same user account.

Net user <object with incomplete group membership>
Net local group <local group name the user should be a member of>
Net group <global group name user should be a member of>

2. Make a batch file, you can use startup script to deploy it. You can
refer to the KB article as following:

Overview of Logon, Logoff, Startup, and Shutdown Scripts in Windows 2000
http://support.microsoft.com/kb/198642

If you have any other questions or concerns regarding this issue, please
feel free to post back. I'm very glad to help you.

Thanks & Regards

Amanda Wang[MSFT]

Microsoft Online Partner Support

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.

This and other support options are available here:
BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/

If you are outside the United States, please visit our International
Support page:
http://support.microsoft.com/default.aspx?scid=/international.aspx.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.