Solved

Automate local admin rights when new user logs onto XP PC

Posted on 2007-03-24
4
340 Views
Last Modified: 2012-05-05
Hi hope someone can help.

We are running SBS 2003 std.
PC's are all XP

Whenever I logon to a computer with a new user id the user doesn't have local rights to be able to change Power settings etc or install software. To get around this I use "Control Userpasswords2" and add the user manually as an Administrator for the PC.

I would like to automate this process so no matter which user logged onto the PC they would get local admin rights.

Thanks
0
Comment
Question by:deltacomputing
4 Comments
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 20 total points
ID: 18785293
I would be very cautious about giving everyone local admin rights, this should not be neccessary give users only the rights that they actually need.
0
 
LVL 11

Accepted Solution

by:
Zenith63 earned 80 total points
ID: 18785330
Add the domain group "Domain Users" to the local Administrators group on the PC.

Open Computer Management, expand the Local Users and Groups tree, open the Groups folder then double click on Administrators.  In the new window click Add... then type Domain Users and click OK.

Now any user who logs on to this PC and is a member of Domain Users(which all users are by default) will be local administrators on the PC.


Although having users as non-administrators is best in a large secure organisation, I find it's overkill and counter-productive in small companies where you tend to find SBS.  I'd always make users local admins of their PCs in an SBS environment.
0
 
LVL 5

Assisted Solution

by:reb_elmagnifico
reb_elmagnifico earned 75 total points
ID: 18785373
You can automate this using GPOs (assuming you are in an Active Directory domain).  Here is a good article:

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

Hope this helps.

Thanks

REB
0
 
LVL 1

Assisted Solution

by:andrewlee7
andrewlee7 earned 75 total points
ID: 18804524
You can create a batch file and use the command line:

net localgroup "Administrators" "MEMBERNAME" /add

You have to include the quotation marks.
0

Featured Post

Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes people don't understand why download speed shows differently for Windows than Linux.Specially, this article covers and shows the solution for throughput difference for Windows than a Linux machine. For this, I arranged a test scenario.I…
Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now