Computer admionistrator

  • Thread starter Thread starter joh
  • Start date Start date
J

joh

Hi,

You can add their AD accounts to the local administrator
group on each computer.
-----Original Message-----
Hi everyone, and many thanks in advance.

My problem is that users need to be administrator for
Click to expand...
their machines so that they can use some shared devices. I
don´t want them to be AD administrators, but need to be
their own machines admins. Is there anything I can do?
 
You can create a GPO with a computer starup script to add
the "Domain Users" to the local administrators group of
all computers in this OU. Here is a sample script"

Start Script

On Error Resume Next

Dim WSHShell, WshSysEnv
Set WshShell = WScript.CreateObject("WScript.Shell")
Set WshSysEnv = WshShell.Environment("PROCESS")


UserString = WshSysEnv("COMPUTERNAME")

GroupString = "Administrators"
Set GroupObj = GetObject("WinNT://" & UserString & "/" &
GroupString)
GroupObj.Add ("WinNT://Domain/Domain Users")
Set GroupObj = Nothing

END SCRIPT

This script would add the "Domain Users" group from
Domain "Domain" to the local workstations administrators
group. Just replace the "DOmain" with your domian name"
and "Domain USers" with your group and you are all set.

Hope this helps.

Mac
-----Original Message-----
Hi,

You can add their AD accounts to the local administrator
group on each computer.
their machines so that they can use some shared devices.
Click to expand...
I
 
Back
Top