Solved

Automate local admin rights when new user logs onto XP PC

Posted on 2007-03-24
4
338 Views
Last Modified: 2012-05-05
Hi hope someone can help.

We are running SBS 2003 std.
PC's are all XP

Whenever I logon to a computer with a new user id the user doesn't have local rights to be able to change Power settings etc or install software. To get around this I use "Control Userpasswords2" and add the user manually as an Administrator for the PC.

I would like to automate this process so no matter which user logged onto the PC they would get local admin rights.

Thanks
0
Comment
Question by:deltacomputing
4 Comments
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 20 total points
ID: 18785293
I would be very cautious about giving everyone local admin rights, this should not be neccessary give users only the rights that they actually need.
0
 
LVL 11

Accepted Solution

by:
Zenith63 earned 80 total points
ID: 18785330
Add the domain group "Domain Users" to the local Administrators group on the PC.

Open Computer Management, expand the Local Users and Groups tree, open the Groups folder then double click on Administrators.  In the new window click Add... then type Domain Users and click OK.

Now any user who logs on to this PC and is a member of Domain Users(which all users are by default) will be local administrators on the PC.


Although having users as non-administrators is best in a large secure organisation, I find it's overkill and counter-productive in small companies where you tend to find SBS.  I'd always make users local admins of their PCs in an SBS environment.
0
 
LVL 5

Assisted Solution

by:reb_elmagnifico
reb_elmagnifico earned 75 total points
ID: 18785373
You can automate this using GPOs (assuming you are in an Active Directory domain).  Here is a good article:

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

Hope this helps.

Thanks

REB
0
 
LVL 1

Assisted Solution

by:andrewlee7
andrewlee7 earned 75 total points
ID: 18804524
You can create a batch file and use the command line:

net localgroup "Administrators" "MEMBERNAME" /add

You have to include the quotation marks.
0

Featured Post

Want to promote your upcoming event?

Attending an event? Speaking at a conference? Or exhibiting at a tradeshow? Easily inform your contacts by using a promotional banner in your email signature. This will ensure your organization’s most important contacts are in the know.

Join & Write a Comment

Know what services you can and cannot, should and should not combine on your server.
For both online and offline retail, the cross-channel business is the most recent pattern in the B2C trade space.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now