Sign in with
Sign up | Sign in
Your question

adding a domain user to local administrative group

Tags:
  • Policy
  • Domain
  • Workstations
  • Microsoft
  • Windows XP
  • Windows
Last response: in Windows 2000/NT
Share
Anonymous
March 2, 2005 7:39:49 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi there,

Any one please help me to add a domain user to local administrative group
in the member domain workstation (windows 2K, XP) using Group Policy?

Thanks,
J.H

More about : adding domain user local administrative group

Anonymous
March 3, 2005 1:40:13 AM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

You could use a simple startup script using the " net localgroup
administrators mydomain\user /add " command or use Restricted Groups at the
OU level [do NOT do a the domain level for the purpose you want to do].
Assuming you are using SP4 you can create a global group, add the user to
the global group and then use Restricted Groups to make that global group a
member of administrators which will place that domain group in the local
administrators group of all domain computers on the OU. --- Steve

http://support.microsoft.com/kb/322241/EN-US/ --- Group Policy startup
scripts

"J.H" <jpthsd@hotmail.com> wrote in message
news:eTEY6l4HFHA.3536@TK2MSFTNGP14.phx.gbl...
> Hi there,
>
> Any one please help me to add a domain user to local administrative group
> in the member domain workstation (windows 2K, XP) using Group Policy?
>
> Thanks,
> J.H
>
>
March 13, 2005 7:33:01 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Steve,

Could you shed some light on the statement "use Restricted Groups at the
> OU level [do NOT do a the domain level for the purpose you want to do]. "?

Specifically, why not use the Restricted Groups at the Domain Level?

Thanks,

Tom


"Steven L Umbach" wrote:

> You could use a simple startup script using the " net localgroup
> administrators mydomain\user /add " command or use Restricted Groups at the
> OU level [do NOT do a the domain level for the purpose you want to do].
> Assuming you are using SP4 you can create a global group, add the user to
> the global group and then use Restricted Groups to make that global group a
> member of administrators which will place that domain group in the local
> administrators group of all domain computers on the OU. --- Steve
>
> http://support.microsoft.com/kb/322241/EN-US/ --- Group Policy startup
> scripts
>
> "J.H" <jpthsd@hotmail.com> wrote in message
> news:eTEY6l4HFHA.3536@TK2MSFTNGP14.phx.gbl...
> > Hi there,
> >
> > Any one please help me to add a domain user to local administrative group
> > in the member domain workstation (windows 2K, XP) using Group Policy?
> >
> > Thanks,
> > J.H
> >
> >
>
>
>
Related resources
Anonymous
March 14, 2005 2:28:29 AM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi Tom.

I was specifically referring to your requirement. Say for instance you did
configure it at the domain level, then the user/group you add to member of for
the administrators group would be added to the local administrators group of ALL
domain computers and the administrators group for the domain itself which you
probably do not want. --- Steve


"Tom" <Tom@discussions.microsoft.com> wrote in message
news:F57A64C8-9508-478E-8B6D-ECED848DE8AD@microsoft.com...
> Steve,
>
> Could you shed some light on the statement "use Restricted Groups at the
> > OU level [do NOT do a the domain level for the purpose you want to do]. "?
>
> Specifically, why not use the Restricted Groups at the Domain Level?
>
> Thanks,
>
> Tom
>
>
> "Steven L Umbach" wrote:
>
> > You could use a simple startup script using the " net localgroup
> > administrators mydomain\user /add " command or use Restricted Groups at the
> > OU level [do NOT do a the domain level for the purpose you want to do].
> > Assuming you are using SP4 you can create a global group, add the user to
> > the global group and then use Restricted Groups to make that global group a
> > member of administrators which will place that domain group in the local
> > administrators group of all domain computers on the OU. --- Steve
> >
> > http://support.microsoft.com/kb/322241/EN-US/ --- Group Policy startup
> > scripts
> >
> > "J.H" <jpthsd@hotmail.com> wrote in message
> > news:eTEY6l4HFHA.3536@TK2MSFTNGP14.phx.gbl...
> > > Hi there,
> > >
> > > Any one please help me to add a domain user to local administrative group
> > > in the member domain workstation (windows 2K, XP) using Group Policy?
> > >
> > > Thanks,
> > > J.H
> > >
> > >
> >
> >
> >
March 16, 2005 1:39:05 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Steve, thank you very much for the help.

"Steven Umbach" wrote:

> Hi Tom.
>
> I was specifically referring to your requirement. Say for instance you did
> configure it at the domain level, then the user/group you add to member of for
> the administrators group would be added to the local administrators group of ALL
> domain computers and the administrators group for the domain itself which you
> probably do not want. --- Steve
>
>
> "Tom" <Tom@discussions.microsoft.com> wrote in message
> news:F57A64C8-9508-478E-8B6D-ECED848DE8AD@microsoft.com...
> > Steve,
> >
> > Could you shed some light on the statement "use Restricted Groups at the
> > > OU level [do NOT do a the domain level for the purpose you want to do]. "?
> >
> > Specifically, why not use the Restricted Groups at the Domain Level?
> >
> > Thanks,
> >
> > Tom
> >
> >
> > "Steven L Umbach" wrote:
> >
> > > You could use a simple startup script using the " net localgroup
> > > administrators mydomain\user /add " command or use Restricted Groups at the
> > > OU level [do NOT do a the domain level for the purpose you want to do].
> > > Assuming you are using SP4 you can create a global group, add the user to
> > > the global group and then use Restricted Groups to make that global group a
> > > member of administrators which will place that domain group in the local
> > > administrators group of all domain computers on the OU. --- Steve
> > >
> > > http://support.microsoft.com/kb/322241/EN-US/ --- Group Policy startup
> > > scripts
> > >
> > > "J.H" <jpthsd@hotmail.com> wrote in message
> > > news:eTEY6l4HFHA.3536@TK2MSFTNGP14.phx.gbl...
> > > > Hi there,
> > > >
> > > > Any one please help me to add a domain user to local administrative group
> > > > in the member domain workstation (windows 2K, XP) using Group Policy?
> > > >
> > > > Thanks,
> > > > J.H
> > > >
> > > >
> > >
> > >
> > >
>
>
>
Anonymous
April 18, 2005 10:41:08 AM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hello Steven,

I tried to do the net localgroup in startup or login got zip for results,
although
the GPO did correctly do other odd jobs update internet favorites and
software
installs. I read some where a "remote" script cannot execute net.exe in
this manner
yet I have seen your solution posted multiple times /places so I am hoping
to get
this to run so I can globally modify local XP administrator users. Any
thoughts ?

W2003 std, with XP serv Pack 2 workstations. Thanks, Dan T.

"Tom" wrote:

> Steve, thank you very much for the help.
>
> "Steven Umbach" wrote:
>
> > Hi Tom.
> >
> > I was specifically referring to your requirement. Say for instance you did
> > configure it at the domain level, then the user/group you add to member of for
> > the administrators group would be added to the local administrators group of ALL
> > domain computers and the administrators group for the domain itself which you
> > probably do not want. --- Steve
> >
> >
> > "Tom" <Tom@discussions.microsoft.com> wrote in message
> > news:F57A64C8-9508-478E-8B6D-ECED848DE8AD@microsoft.com...
> > > Steve,
> > >
> > > Could you shed some light on the statement "use Restricted Groups at the
> > > > OU level [do NOT do a the domain level for the purpose you want to do]. "?
> > >
> > > Specifically, why not use the Restricted Groups at the Domain Level?
> > >
> > > Thanks,
> > >
> > > Tom
> > >
> > >
> > > "Steven L Umbach" wrote:
> > >
> > > > You could use a simple startup script using the " net localgroup
> > > > administrators mydomain\user /add " command or use Restricted Groups at the
> > > > OU level [do NOT do a the domain level for the purpose you want to do].
> > > > Assuming you are using SP4 you can create a global group, add the user to
> > > > the global group and then use Restricted Groups to make that global group a
> > > > member of administrators which will place that domain group in the local
> > > > administrators group of all domain computers on the OU. --- Steve
> > > >
> > > > http://support.microsoft.com/kb/322241/EN-US/ --- Group Policy startup
> > > > scripts
> > > >
> > > > "J.H" <jpthsd@hotmail.com> wrote in message
> > > > news:eTEY6l4HFHA.3536@TK2MSFTNGP14.phx.gbl...
> > > > > Hi there,
> > > > >
> > > > > Any one please help me to add a domain user to local administrative group
> > > > > in the member domain workstation (windows 2K, XP) using Group Policy?
> > > > >
> > > > > Thanks,
> > > > > J.H
> > > > >
> > > > >
> > > >
> > > >
> > > >
> >
> >
> >
!