Solved

Add "Domain Admins" to Administrators from within Workgroup

Posted on 2008-06-10
4
273 Views
Last Modified: 2013-12-12
I'm building a deployment image for my job. I was told in a related post not to connect your base image pc to a domain and to just have sysprep's mini setup take care of it. With that said, how can I now add "domains admins" as a member of the administrators group?
0
Comment
Question by:troubledFish
  • 2
4 Comments
 
LVL 25

Accepted Solution

by:
slam69 earned 500 total points
ID: 21753647
hi

use the restricted groups option in group policy to force the domain admin group into the local admin group works a charm

http://support.microsoft.com/kb/555026
0
 
LVL 6

Expert Comment

by:evanmcnally
ID: 21753792
Sysprep can automatically remove domain membership information and the unique SID from the PC when you use it to "reseal" the PC, so you do not need to avoid joining your domain with your image-source PC.  The unique information will all be stripped out by Sysprep.  

Sysprep supports a setting to have an imaged-PC automatically join a specified domain, or you can join the domain manually after you have deployed the image.  In either case, the act of joining the domain will automatically place the Domain Admins group into the PC's local "administrators" group.  

When I create images for Ghost using Sysprep, I do join the domain and also add additional custom domain groups to the image PC.  I then use Sysprep to remove domain information and create my ghost image.  Any additional custom groups you had added to the PC when when it was joined to the domin for image creation will also be preserved.  Domain groups remain on a PC when it is removed from a domain and will function normally if that PC is re-joined to the same domain.

Most of the automation settings in Sysprep can be easily configured with setupmgr.exe.  This link has a step-by-step procedure for making your sysprep.inf file using the GUI interface.
http://www.windowsnetworking.com/articles_tutorials/Customizing-Unattended-Setup.html

The sysprep help file is also actually helpful!
0
 
LVL 6

Expert Comment

by:oswaldofarith
ID: 21754223
0
 
LVL 6

Expert Comment

by:evanmcnally
ID: 21754262
Just to clarify, the question is how to add "Domain Admins" specifically and not just any arbitrary group, right?  In that case, no script is necessary.  Domain Admins is always added to the PC's Administrators group when a PC is joined to a domain.
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
Video by: Tony
This video teaches viewers how to export a project from Adobe Premiere Pro and the various file types involved.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question