Link to home
Start Free TrialLog in
Avatar of USBMHC
USBMHC

asked on

Add a user to the administrator group in group policy?

In group policy how do I add the user NT AUTHORITY\INTERACTIVE to the Administrator Group on all my systems?
ASKER CERTIFIED SOLUTION
Avatar of Kenneniah
Kenneniah

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Kenneniah
Kenneniah

For example...log in as any user, go to a command prompt and type...
whoami /groups

You will always see NT AUTHORITY\INTERACTIVE as one of your group memberships when you are logged in locally.
When connecting to a computer remotely (IE accessing a network share) you do not gain this membership however.
Avatar of USBMHC

ASKER

I'm actualy adding this to the GPO file of a local system that I will be imaging. Its important that we have this on our systems to make sure that anyone that logs into the machine is a Administrator on it and can run software that requires Administrator access.
I just used this method but I didn't add the INTERACTIVE group... I created a more restrictive group (but more open than Domain Admins) and added that group to local administrators.

It's very helpful to have this functionality.