Force a domain computer to include domain admins in local administrators group

Posted on 2004-11-18
Last Modified: 2013-12-04
There is a windows xp computer on our windows 2000 domain.  The user has removed domain admins from the local administrators group.  I am one of the domain admins.  I do know how to create custom group policy or custom registry entry.  But, I don't know where in the registry this might be located.  I think I have found, using whoami /ALL, the correct SID to enter.  We do use kixtart as well and I am familiar with that too.  I can't allow the user to know what I am doing or log directly into their pc.  Help Please.
Question by:JES_62551
    LVL 8

    Expert Comment

    As an idea, use the 'cacls' command to create a batch file which adds you to the local admin group, then run the batch file through the gpo when the user logs in (like a logon script that maps drives, but give you appropiate permissions instead :) )

    Hope that makes sense
    LVL 3

    Accepted Solution


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Find Ransomware Secrets With All-Source Analysis

    Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

    As I write this article, I am finishing cleanup from the Qakbot virus variant found in the wild on April 18, 2011.  It was a messy beast that had varying levels of infection, speculated as being dependent on how long it resided on the infected syste…
    Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now