Solved

local admin

Posted on 2004-10-07
11
577 Views
Last Modified: 2010-04-14
we have sent couple of pcs to our site who does not  have network connectivity to our network, and now find out they need to have local admin rights ... do u know how can i make them local admin w/o giving them a local admi password.. OS is 2K.. any ideas would be greatly appreciated..

0
Comment
Question by:Rohail2004
  • 4
  • 2
  • 2
  • +2
11 Comments
 
LVL 57

Expert Comment

by:Pete Long
ID: 12251362
right click my coputer > manage > users and groups >groups > administrators

and add them into this group :)
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 12251384
And why do you need admin rights? if you need elevated rights consider putting them in the Power Users group instead

regards
Pete
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 12251447
unfortuately many poorly written apps require you to have local admin rights to RUN them (not just install),,, but in any case, Pete's answer is correct.
0
 

Author Comment

by:Rohail2004
ID: 12251490
fellas, I know how to add a user onto a local admin group,  my question was that we already sent the laptop to our remote site and those users who currently logged into the laptops does not have admin rights and they need to have a local admin rights so they cant add themselves, and those laptops are not on OUR network so we can't remote control to those laptops either..  is there any way in registry or any script which can run locally and make those users local admin ?
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 12251512
no,,, only a member of the local admin group or domain admin group can put someone in the local admin group.  
0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 

Author Comment

by:Rohail2004
ID: 12251537
so basically you are saying there is no way ?... someone told me you can run a script.. so i thought u guys might have an idea .. thanx
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 12251643
any script you would run would have to be run as the local admin in order to have secuirty to do such a thing.  So i guess it would be possible to do some type of "run as" command in a script which would inclide the admin username and password in it.  But then of course the password would be right there in plain text.  Why not give the user the local admin password?? they wouldn't be able to do anything to you domain since its just the local admin password,,,, and aren't you going to give them local admin rights anyway??
0
 
LVL 18

Expert Comment

by:luv2smile
ID: 12251656
They can run software that will reset the builtin administrator account password and then they can log in with the builtin admin account and add their account to the admin group. Then log out and back in with their account. Of course this would give them access to the builtin admin account, but they are going to be admins anyway...so...

http://home.eunet.no/~pnordahl/ntpasswd/
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 12251850
You can use this script to add a user to a local group (Admin):

http://www.microsoft.com/technet/community/scriptcenter/user/scrug69.mspx

strComputer = "MyComputer"
Set objGroup = GetObject("WinNT://" & strComputer & "/Administrators,group")
Set objUser = GetObject("WinNT://" & strComputer & "/kenmyer,user")
objGroup.Add(objUser.ADsPath)
0
 
LVL 25

Accepted Solution

by:
mikeleebrla earned 250 total points
ID: 12251911
i doubt that would work unless the person running the script was already in the admin group.  Think about it, they dont have permission to add users to any group. If it does work then it is a HUGE secuirty hole in the OS since any user could then easliy make themself a member of the local admin group, and i doubt MS would post a security hole such as this on thier website.
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 12251997
Yes..  but you call it from a batch file using the runas command..  if your users know nothing of batch files, and how to view them, you could package this up and send it to them..  perhaps as a autorun application?  just thinking out loud here, as I have never had to do this before...  :)
0

Featured Post

Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
A procedure for exporting installed hotfix details of remote computers using powershell
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now