Making a Domain Admin a local admin on remote machines

Posted on 2004-11-26
Last Modified: 2010-05-18
Hey all
Does anyone have a batch file or some type of script they could share that i coule send out through my network to add the domain admin to the local admin group of all users pcs.
This is a windows 2003 domain infrastructure.
Thanks in Advance

Even if you dont have one that would work on all users machines just one that would make it possible to do this on any remote machine.
I know in windows 2000 you could use the cusrmgr.exe tool but i havent seen that included in the 2003 server tool kit. If someone has any ideas please help out.
Question by:jjeffords
    1 Comment
    LVL 41

    Accepted Solution

    That's a bit odd... the Domain Admins should already be in the local Administrators group.   I wonder if you've got just one or two PC that have it missing (rather than a whole bunch)?

    Anyway... To fix this, you'll need to create a Machine "startup script" (not the normal User "login script") in Active Directory.   Then apply that login script to a GPO that has the PCs it.

    The batch file should have the following:

         Net localgroup Administrators "YourDomainNameHere\Domain Admins" /add

    BTW: You'll probably get suggestions about using the Restricted Groups feature of Active Directory... that's a VERY BAD idea.. it completely zaps the existing group memberships and replaces it with what you decide (so folks who have their domain accounts in their own local Administrators group would be kicked out).

    Featured Post

    Enabling OSINT in Activity Based Intelligence

    Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

    Join & Write a Comment

    Suggested Solutions

    Title # Comments Views Activity
    centeredAverage challenge 8 92
    Visual xHarbour 1 52
    sumHeights2  challenge 7 52
    bigHeights  challenge 13 43
    INTRODUCTION We all know how to code. But at times you simply want to insert a common code block into your existing code and amend it as per your requirements. This tool not only saves you time but also saves you the pain of typing it all out aga…
    I know it’s not a new topic to discuss and it has lots of online contents already available over the net. But Then I thought it would be useful to this site’s visitors and can have online repository on vim most commonly used commands. This post h…
    In this fifth video of the Xpdf series, we discuss and demonstrate the PDFdetach utility, which is able to list and, more importantly, extract attachments that are embedded in PDF files. It does this via a command line interface, making it suitable …
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now