Adding user to local admin group

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

If anyone can help with this, I would really appreciate it.

I'v have a windows 2003 AD. I have already added the users to AD.

When I try to add the user to the local admin group on there machine it does
not find that users, howerver, it finds everyone else. I've added five other
machine with no problems.

I've done a search on AD and the users appears, but I can't find them when
I try to add it to a local admin group on that machine.

TIA,

Trung
 
In
Trung Quach said:
If anyone can help with this, I would really appreciate it.

I'v have a windows 2003 AD. I have already added the users to AD.

When I try to add the user to the local admin group on there machine
it does not find that users, howerver, it finds everyone else. I've
added five other machine with no problems.

I've done a search on AD and the users appears, but I can't find
them when I try to add it to a local admin group on that machine.

TIA,

Trung
Click to expand...



Can you manage the workstation from the server, see the local users/groups,
and do it there? If not, there's something wrong...

What I usually do in a domain is, create two domain universal security
groups: LocalAdmin and LocalPowerUser. I add those groups to the local
admins & power users group, usually via a startup script of a batch file
containing net localgroup ... commands. Then, you can add the users to the
*domain* groups you wish, and control everything from the server.

That said, you might want to reconsider doing this anyway. Why do your users
need local admin rights? If you have legacy applications that won't run
properly without this, there are often ways around it - one way would be to
use the compatws template in group policy.
 
Back
Top