Managing Local accounts remotely

Posted on 2006-04-26
Last Modified: 2013-12-03

I want to create image for about 2000 Windows XP SP2. Those PCs are for different sites. Each site is a domain by itself. All sites and domains are connected to my network by weak connections. For every number of sites we have number of engineers.

Our policy denies form given the local Administrator to any body (kept in treasury).
Our engineers need the administrator password for:

•      Adding the PC to the Domain
•      For trouble shooting
•      To install applications on the Local PC’s.
•      There are few applications which are requiring Administrator Group

My Question is: what is the best practice in this situation?
      Also, what is the best way of managing local account in remote sites not connected to the domain.  

Question by:ALNMOO
    LVL 57

    Expert Comment

    Excuse my ignorance, but what is a weak conneciton?

    When you say "local Administrator" what do you mean?  I understand this to mean local admin on a desktop,  you seem to be using it meaning domain admin for one site.

    Remote Desktop via VPN.
    LVL 7

    Author Comment

    thanks for your reply
     weak conneciton = slow links

    Local Administrator = The administrator accont in the PC itself NOT in the domain.

    VPN is good Idea, but the problem I have more than 2000 PCs!!
    LVL 6

    Accepted Solution

    Whats your budget?

    There are solutions out there but it is difficult to recommend without knowing if you have a budget for the support of your 2000 desktops?

    example: Altiris remote deployment will allow remote management over slower links utilising carbon copy.

    You will also be able to deploy update, join the machines to the domain and pretty much utilise it for all of your administrative tasks. But you are looking at 90 odd thousand in licencing "last time i checked"

    The other options are largely manual and would require considerable planning.

    Let me know your position on this.


    LVL 57

    Assisted Solution

    How many sites?

    Who cares about the number of PCs?  You setup a VPN between your comptuer and the remote site, then remote desktop to the computer.  Unless you have 1 PC and 2,000 unique sites.

    There are products that may make some of this easie, software distribution for example can be done by things like LAN Desk and some of the Tivoli offerings.

    What do you mean you are going to add them to the domain, but they are not connected to the domain?

    Do you really mean that you ave a single AD domain and the domain controllers are at a centeral site and you have computer at remote sites?  If so a lot of the controls can be done by GPO, it complex, but it can be done.  
    LVL 17

    Assisted Solution

    From another computer use computer management.

    Right click on My Computer select Manage
    When Computer Management appears, right click "Computer Management (local)"
    Choose "Connect to another computer"
    Type the name of the remote computer in the Another Computer box.

    You should then, under System Tools -> Local Users and Groups, be able to add users, and change group memberships.

    You of course:
    Have to be and administrator on the domain or local machine

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    Password hashing is better than message digests or encryption, and you should be using it instead of message digests or encryption.  Find out why and how in this article, which supplements the original article on PHP Client Registration, Login, Logo…
    If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    25 Experts available now in Live!

    Get 1:1 Help Now