Local Admin Access

  • Thread starter Thread starter Mike T
  • Start date Start date
M

Mike T

I have a group for our Helpdesk personell that I have
delegated authority to reset passwords and unlock
accounts. No other permissions are needed for user
accounts. I also want this group to have local admin
rights to their computers or any computer that they log on
to for end-user troubleshooting. I'm trying to give these
users only as much authority as needed. Not sure if this
is a delegation thing or a Group Policy thing. Any help
would be appreciated.
 
If you want your helpdesk staff to be members of the local "Admin" group on
the pc's then you will need to create the following COMPUTER login script.

net localgroup "administrators" "<domain>\<group>" /add

Add that script to the correct GPO under Computer config>windows
settings>scripts.

Philip Nunn
 
Back
Top