Windows 2003 domain - local admin rights

I've created a domain user that runs a batch file which install some software upon login. Is there a way to get this user to have local admin rights on every computer on the domain? I don't want to add him to the DomainAdmins group..
Who is Participating?

Improve company productivity with a Business Account.Sign Up

fuzzyfreakConnect With a Mentor Commented:
Hi MMHDU, I thought you could do it with Group Policy but it appears I am wrong, on investigation though, it seems it has to be a script and I have found one which should work for you, it is the one named ADDAdmin.vbs on this page -

Let me know how you get on.

net localgroup administrators username /add

The above command will add the user into Local admin group. You can put this command in login script or remotly execute from your machine using PSexec remote tool. You can download this from

Hope this helps

MMHDUAuthor Commented:
That command won't work as you have to be a local admin to add other users as local admin. I get an access denied error when I put that into a login script of the user.
Alternatively, use Group Policy - need some help with this?
MMHDUAuthor Commented:
If you could point me in the right direction I would appreciate it.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.