Sign in to follow this  
Followers 0
dspent

Making Domain Users Local Administrators

11 posts in this topic

How can I add the group DOMAIN USERS to the LOCAL ADMINISTRATORS group on all workstations?

Share this post


Link to post
Share on other sites



you can use the restricted groups option in the group policy, or use "net localgroup" administrators /add "adgroupname"

keilamym

Share this post


Link to post
Share on other sites

so in order to use this in an autoit3 script how do I code this...?

I know extremely little about scripting. Just what I pick up from this forum.

Share this post


Link to post
Share on other sites

I'm not able to test it right now but you may be able to use something like:

RunWait ( @Comspec & ' /C Net localgroup administrators "Domain Users" /add' )

If you try this and it doesn't work let me know and I will work on it tomorrow when I'm on a network.

Z/K

Share this post


Link to post
Share on other sites

Thanks a million.....to both of you.

Zen...It works without a hitch.

One more question though....once it runs, if the domain users group is already added how do I skip this step?

Share this post


Link to post
Share on other sites

as a batch file

NET LOCALGROUP ADMINISTRATORS /ADD "DOMAIN USERS"

works great.

I'll have to work on the scripting part

Share this post


Link to post
Share on other sites

oh cool... somebody posted it already.. i went home for the day

Share this post


Link to post
Share on other sites

My suggestion is go with restricted groups. You will have an easier time removing it when you need to. If you need help doing this feel free to ask.

red

Share this post


Link to post
Share on other sites

i'd have to agree...

if workstations on sp3, the restricted groups policy overwrites local settings. in sp4, this option is appended.

good luck

Share this post


Link to post
Share on other sites

i'd have to agree...

if workstations on sp3, the restricted groups policy overwrites local settings. in sp4, this option is appended.

good luck

hmm..my workstations are on SP4 and they are still overwritten.

red

Share this post


Link to post
Share on other sites

redndahead

thanks for the info.. this was supposed to be changed in sp4 but i guess microsoft didn't get to it. we're still on sp3

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0