Results 1 to 4 of 4

Thread: adding domain users automatically to the local admin group

  1. #1
    Join Date
    Jun 2011
    Posts
    2

    adding domain users automatically to the local admin group

    I have a windows server 2003 domain controller, and I want all of the users in a certain OU to have local administrator privileges on the client computers, so that they can install programs such as MS Office. Yes, I do know that the users already have the rights to install programs such as Chrome, and Fire Fox. I also know that the domain users can't add themselves to the local admin group.

    I've read this post and I've tried both the logon and I've tried the Restricted Group trick via a GPO, and sadly neither one has worked.

    All of the client computers have the same local username and password that is a member of the local admin group (in my case it's superuser). Is there a logon script out there that can add the domain users to the local admin group using the superuser account and password?

    I am also looking to upgrade the windows server 2003 to 2008, is there a new GPO option that will allow me to do this?

    Thanks in advance!

  2. #2
    Join Date
    Dec 2007
    Posts
    1,736

    Re: adding domain users automatically to the local admin group

    Well, you can easily do this with Group Policy. Create att policy in active directory and link it to the OU containing your computer accounts. Edit the policy. Under computer configuration, security, restricted groups, you can add a domain group to the local administrators group. The GPO is great if you can use it, but the group membership GPO forces the members to be only the ones in the list -- you cannot have any "extra" administrators unless they are in a separate OU.

  3. #3
    Join Date
    Jun 2011
    Posts
    2

    Re: adding domain users automatically to the local admin group

    I've tried doing with a GPO, but it doesn't work. I made a screen recording of myself trying to set it up via GPO. Doing it via GPO would definitly be the ideal way of doing things.

    Here is the video, please let me know what I am doing wrong.

  4. #4
    Join Date
    Dec 2007
    Posts
    2,291

    Re: adding domain users automatically to the local admin group

    Can you try to go into the Machine Policy for the OU in question, browse down to security settings, and then to Restricted Groups. Create a Restricted Group called Administrators, and then add all the groups/users you want to have in the local admins group. Give the machines 90 minutes or so, and they will refresh and set their local admins membership to whatever you specified.

Similar Threads

  1. Adding Users to Local Security Group from other Domain
    By duke2555 in forum Active Directory
    Replies: 2
    Last Post: 30-08-2011, 12:36 AM
  2. Add domain user\group to local admin group problem
    By Landon in forum Active Directory
    Replies: 3
    Last Post: 16-10-2009, 09:30 PM
  3. can't add users to the local admin group
    By ride1600@cox.net in forum Windows Server Help
    Replies: 5
    Last Post: 07-07-2008, 06:37 PM
  4. Replies: 3
    Last Post: 17-06-2008, 03:16 PM
  5. script to add multple users to local admin group on servers
    By tdubb in forum Windows Server Help
    Replies: 1
    Last Post: 21-03-2008, 05:16 AM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,653,051,168.48218 seconds with 17 queries