Solved

Automate local admin rights when new user logs onto XP PC

Posted on 2007-03-24
4
344 Views
Last Modified: 2012-05-05
Hi hope someone can help.

We are running SBS 2003 std.
PC's are all XP

Whenever I logon to a computer with a new user id the user doesn't have local rights to be able to change Power settings etc or install software. To get around this I use "Control Userpasswords2" and add the user manually as an Administrator for the PC.

I would like to automate this process so no matter which user logged onto the PC they would get local admin rights.

Thanks
0
Comment
Question by:deltacomputing
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 20 total points
ID: 18785293
I would be very cautious about giving everyone local admin rights, this should not be neccessary give users only the rights that they actually need.
0
 
LVL 11

Accepted Solution

by:
Zenith63 earned 80 total points
ID: 18785330
Add the domain group "Domain Users" to the local Administrators group on the PC.

Open Computer Management, expand the Local Users and Groups tree, open the Groups folder then double click on Administrators.  In the new window click Add... then type Domain Users and click OK.

Now any user who logs on to this PC and is a member of Domain Users(which all users are by default) will be local administrators on the PC.


Although having users as non-administrators is best in a large secure organisation, I find it's overkill and counter-productive in small companies where you tend to find SBS.  I'd always make users local admins of their PCs in an SBS environment.
0
 
LVL 5

Assisted Solution

by:reb_elmagnifico
reb_elmagnifico earned 75 total points
ID: 18785373
You can automate this using GPOs (assuming you are in an Active Directory domain).  Here is a good article:

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

Hope this helps.

Thanks

REB
0
 
LVL 1

Assisted Solution

by:andrewlee7
andrewlee7 earned 75 total points
ID: 18804524
You can create a batch file and use the command line:

net localgroup "Administrators" "MEMBERNAME" /add

You have to include the quotation marks.
0

Featured Post

Comparison of Amazon Drive, Google Drive, OneDrive

What is Best for Backup: Amazon Drive, Google Drive or MS OneDrive? In this free whitepaper we look at their performance, pricing, and platform availability to help you decide which cloud drive is right for your situation. Download and read the results of our testing for free!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Issue: Unstable cursor in Windows XP and Windows runs extremely slow in that any click will bring up the Hour glass (sometimes for several seconds before giving you what you want) . Troubleshooting Process and the FINAL FIX: This issue see…
If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question