local admin access defined from domain server

Posted on 2002-04-02
Last Modified: 2010-04-13
Is there a way to assign local admin privilleges to users (for example install programs, configure system) using a policy on the domain controller. This is to save having to visit each machine and add local administrator privilleges for each user. I want all domain users to be able to administrate all computers on the domain except the domain controller and not to have domain admin privilleges.

Any ideas?

Question by:wiffen
LVL 17

Assisted Solution

mikecr earned 125 total points
ID: 6913307
Go into group policy and under both Computer Configuration and User Configuration under Administrative Templates\Windows Components\Windows installer, enable "Always install with elevated privlidges" and this will allow users to install programs without getting denied access.

Author Comment

ID: 6913441
Thanks for you comment. I looking for full administrator privilleges, not just install privilleges. So they could do things like add new users to local machines.

Accepted Solution

matt023 earned 125 total points
ID: 6913986
I don't think there's way to do it within Win2k itself.
However, you can write a script based on the cusrmgr.exe utility found in the Resource Kit to accomplish what you're trying to do.  You can write a script and run it using a domain admin account, and it will add Domain Users into each PC's local admin group.
Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

LVL 18

Expert Comment

ID: 8701434
No comment has been added lately, so it's time to clean up this TA.
I will leave a recommendation in the Cleanup topic area that this question is:

Split between mikecr and matt023@lc

Please leave any comments here within the next seven days.


EE Cleanup Volunteer

Expert Comment

ID: 8754280
Per recommendation.

EE Moderator

Expert Comment

ID: 9266282
You can do it through group policy.

Computer config - Windows Settings - Security settings - Restricted groups

Just add a group in there, 'Administrators' and then add 'Domain users' to that group, by going in to the properties of 'Administrators'.

When users log in, the group policy will be applied and everyone will be local admin.

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Virtualise server 2000 for Hyper V 4 841
Question about teaming two NIC's on Server 2012 2 569
Domain dunctional level. 4 313
Referencing a mapped drive 6 135
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
: Microsoft Office Collaborate for free and online versions of Microsoft  Word, Excel, Powerpoint, OneNote, Onedrive , Email, Calendar etc. In short we can say that Microsoft office is a suite of servers, applications and services developed by  Micr…
This Micro Tutorial will teach you how to censor certain areas of your screen. The example in this video will show a little boy's face being blurred. This will be demonstrated using Adobe Premiere Pro CS6.
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now