Making a domain account a local admin wherever it is used?

  • Thread starter Thread starter mulhollands
  • Start date Start date
M

mulhollands

Hello, I wonder if someone could help me.

We wish to make one particular user a local admin on whatever
workstation he logs on to. He wanders about the organisation quite a
lot :)

Running W2K/2003 server, XP SP2 workstations.

Is there any way to do this?

Thanks

Stephen
 
There are a couple of ways to do this - using Group Policy Restricted Groups
or a Group Policy "startup" script that uses the net localgroup command that
adds the domain user to the administrators group. See the link below on how
to use Restricted Groups with the "member of" option which requires that the
Windows 2000 domain controllers be SP4 to work correctly. You would want to
use Restricted Groups at the OU level in your situation and not the domain
container. The OU would contain the computers that you want Restricted
Groups to apply to. --- Steve

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html
 
Steven said:
There are a couple of ways to do this - using Group Policy Restricted Groups
or a Group Policy "startup" script that uses the net localgroup command that
adds the domain user to the administrators group. See the link below on how
to use Restricted Groups with the "member of" option which requires that the
Windows 2000 domain controllers be SP4 to work correctly. You would want to
use Restricted Groups at the OU level in your situation and not the domain
container. The OU would contain the computers that you want Restricted
Groups to apply to. --- Steve

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html
Click to expand...

Thank you very much for that, Steve.

Stephen
 
Back
Top