Security

[Jason Hill]

Is there any way to add a domain user to the local administrator group
through a login script or registry setting?

 

[aaron]

net local group administrators user\domain /ADD

 

[Tim Hines, MCSA, MCSE]

You can do this using a restricted group in a group policy. See
http://support.microsoft.com/default.aspx?scid=kb;en-us;320045

This can also be done using using a script available at
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/scriptcenter/user/default.asp.


--
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Jason Hill]

Please explain this a little better, I do not understand.

Thanks.

 

[MadDHatteR]

NET localgroup administrators mydomain\mylocaladmin add

This command will add the user mydomain\mylocaladmin to the local
administrator group on the box from which the command is run. You would have
to run this command on each box somehow -- using the AT command, logging
into each box, script (vbs, js), or some other means.

That being said, you may find restricted groups (mentioned in another reply)
better suit your needs.

\\ MadDHatteR