How to adding domain user to local computer

[Guest]

Archived from groups: microsoft.public.win2000.general (More info?)

Hi,

When users log into the domain, it does not give them any local rights. I
would like to give them power user rights. Currently this is done manually.

My question is how can I automatically add a user to the local machine and
give it power user rights. Can this be done via an AD Policy?

Thanks
SL

 

[Guest]

Archived from groups: microsoft.public.win2000.general (More info?)

you can add Domain Users group to local Power Users group.


--
Andrei Ungureanu
www.eventid.net
Free Windows event logs reports
http://www.altairtech.ca/evlog/

"slmleung" <slmleung@discussions.microsoft.com> wrote in message
news:8A114C29-FEF6-49A3-BFBB-69B89C14066A@microsoft.com...
> Hi,
>
> When users log into the domain, it does not give them any local rights. I
> would like to give them power user rights. Currently this is done
> manually.
>
> My question is how can I automatically add a user to the local machine and
> give it power user rights. Can this be done via an AD Policy?
>
> Thanks
> SL

 

[Guest]

Archived from groups: microsoft.public.win2000.general (More info?)

How can this be done automatically. Is there a way to make the change via a
script? I really don't want to go to every machine and add the group
manually.


"Andrei Ungureanu" wrote:

> you can add Domain Users group to local Power Users group.
>
>
> --
> Andrei Ungureanu
> www.eventid.net
> Free Windows event logs reports
> http://www.altairtech.ca/evlog/
>
> "slmleung" <slmleung@discussions.microsoft.com> wrote in message
> news:8A114C29-FEF6-49A3-BFBB-69B89C14066A@microsoft.com...
> > Hi,
> >
> > When users log into the domain, it does not give them any local rights. I
> > would like to give them power user rights. Currently this is done
> > manually.
> >
> > My question is how can I automatically add a user to the local machine and
> > give it power user rights. Can this be done via an AD Policy?
> >
> > Thanks
> > SL
>
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.general (More info?)

with NET LOCALGROUP in a startup script or some other ideas here:
http://support.microsoft.com/default.aspx?scid=kb;en-us;810076
http://www.experts-exchange.com/Operating_Systems/Win2000/Q_21289460.html



--
Andrei Ungureanu
www.eventid.net
Free Windows event logs reports
http://www.altairtech.ca/evlog/

"slmleung" <slmleung@discussions.microsoft.com> wrote in message
news:9846F862-CD6D-4FFA-BB94-FDC8F1AB2808@microsoft.com...
> How can this be done automatically. Is there a way to make the change via
> a
> script? I really don't want to go to every machine and add the group
> manually.
>
>
> "Andrei Ungureanu" wrote:
>
>> you can add Domain Users group to local Power Users group.
>>
>>
>> --
>> Andrei Ungureanu
>> www.eventid.net
>> Free Windows event logs reports
>> http://www.altairtech.ca/evlog/
>>
>> "slmleung" <slmleung@discussions.microsoft.com> wrote in message
>> news:8A114C29-FEF6-49A3-BFBB-69B89C14066A@microsoft.com...
>> > Hi,
>> >
>> > When users log into the domain, it does not give them any local rights.
>> > I
>> > would like to give them power user rights. Currently this is done
>> > manually.
>> >
>> > My question is how can I automatically add a user to the local machine
>> > and
>> > give it power user rights. Can this be done via an AD Policy?
>> >
>> > Thanks
>> > SL
>>
>>
>>

 

[dhazar]

I prefer to use Restricted groups for this purpose. Here is a design that allows me to add a domain user to pretty much any local group by adding them to a group in active directory.

http://davidhazar.blogspot.com/2009/10/active-directory-group-policy.html