set local password administrator using GPO

Posted on 2007-08-10
Medium Priority
Last Modified: 2013-11-05
Hi you guys

Is it possible to set local administrator password to all users in my WK3 server using GPO? If it is, how?
In the same way, is it possible to set a user to be local administrator in a computer, if it is, how?

Question by:ojgarciah
LVL 70

Expert Comment

ID: 19673975

Expert Comment

by:Ahmed Abdel Salam
ID: 19673983
yes you can using startup script
net user administrator "password"
LVL 11

Expert Comment

ID: 19674128
The following command will add the logged in use to the Local Administrators group -
net localgroup Administrators %userdomain%\%username% /add

Of course the problem is that without being a member of the Local Administrators group in the first place this command will not work!  The only way I can think of around this would be add the Domain Users group to the Domain Admins group, stick X-Reagent's command and my command in the network logon script and have everybody reboot their PCs and log in again.  Now just remove Domain Users from Domain Admins.
Bit of a dodgy way of doing it, but depending on your scenario it may be of some use.

Accepted Solution

lecutis earned 2000 total points
ID: 19674241
You can add users to the administrator group of a PC using 'Restricted Groups' in group policy.

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

750 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question