Solved

local admin

Posted on 2004-10-07
11
583 Views
Last Modified: 2010-04-14
we have sent couple of pcs to our site who does not  have network connectivity to our network, and now find out they need to have local admin rights ... do u know how can i make them local admin w/o giving them a local admi password.. OS is 2K.. any ideas would be greatly appreciated..

0
Comment
Question by:Rohail2004
  • 4
  • 2
  • 2
  • +2
11 Comments
 
LVL 57

Expert Comment

by:Pete Long
ID: 12251362
right click my coputer > manage > users and groups >groups > administrators

and add them into this group :)
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 12251384
And why do you need admin rights? if you need elevated rights consider putting them in the Power Users group instead

regards
Pete
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 12251447
unfortuately many poorly written apps require you to have local admin rights to RUN them (not just install),,, but in any case, Pete's answer is correct.
0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 

Author Comment

by:Rohail2004
ID: 12251490
fellas, I know how to add a user onto a local admin group,  my question was that we already sent the laptop to our remote site and those users who currently logged into the laptops does not have admin rights and they need to have a local admin rights so they cant add themselves, and those laptops are not on OUR network so we can't remote control to those laptops either..  is there any way in registry or any script which can run locally and make those users local admin ?
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 12251512
no,,, only a member of the local admin group or domain admin group can put someone in the local admin group.  
0
 

Author Comment

by:Rohail2004
ID: 12251537
so basically you are saying there is no way ?... someone told me you can run a script.. so i thought u guys might have an idea .. thanx
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 12251643
any script you would run would have to be run as the local admin in order to have secuirty to do such a thing.  So i guess it would be possible to do some type of "run as" command in a script which would inclide the admin username and password in it.  But then of course the password would be right there in plain text.  Why not give the user the local admin password?? they wouldn't be able to do anything to you domain since its just the local admin password,,,, and aren't you going to give them local admin rights anyway??
0
 
LVL 18

Expert Comment

by:luv2smile
ID: 12251656
They can run software that will reset the builtin administrator account password and then they can log in with the builtin admin account and add their account to the admin group. Then log out and back in with their account. Of course this would give them access to the builtin admin account, but they are going to be admins anyway...so...

http://home.eunet.no/~pnordahl/ntpasswd/
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 12251850
You can use this script to add a user to a local group (Admin):

http://www.microsoft.com/technet/community/scriptcenter/user/scrug69.mspx

strComputer = "MyComputer"
Set objGroup = GetObject("WinNT://" & strComputer & "/Administrators,group")
Set objUser = GetObject("WinNT://" & strComputer & "/kenmyer,user")
objGroup.Add(objUser.ADsPath)
0
 
LVL 25

Accepted Solution

by:
mikeleebrla earned 250 total points
ID: 12251911
i doubt that would work unless the person running the script was already in the admin group.  Think about it, they dont have permission to add users to any group. If it does work then it is a HUGE secuirty hole in the OS since any user could then easliy make themself a member of the local admin group, and i doubt MS would post a security hole such as this on thier website.
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 12251997
Yes..  but you call it from a batch file using the runas command..  if your users know nothing of batch files, and how to view them, you could package this up and send it to them..  perhaps as a autorun application?  just thinking out loud here, as I have never had to do this before...  :)
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question