Add "Domain Admins" to Administrators from within Workgroup

Posted on 2008-06-10
Medium Priority
Last Modified: 2013-12-12
I'm building a deployment image for my job. I was told in a related post not to connect your base image pc to a domain and to just have sysprep's mini setup take care of it. With that said, how can I now add "domains admins" as a member of the administrators group?
Question by:troubledFish
  • 2
LVL 25

Accepted Solution

slam69 earned 2000 total points
ID: 21753647

use the restricted groups option in group policy to force the domain admin group into the local admin group works a charm


Expert Comment

ID: 21753792
Sysprep can automatically remove domain membership information and the unique SID from the PC when you use it to "reseal" the PC, so you do not need to avoid joining your domain with your image-source PC.  The unique information will all be stripped out by Sysprep.  

Sysprep supports a setting to have an imaged-PC automatically join a specified domain, or you can join the domain manually after you have deployed the image.  In either case, the act of joining the domain will automatically place the Domain Admins group into the PC's local "administrators" group.  

When I create images for Ghost using Sysprep, I do join the domain and also add additional custom domain groups to the image PC.  I then use Sysprep to remove domain information and create my ghost image.  Any additional custom groups you had added to the PC when when it was joined to the domin for image creation will also be preserved.  Domain groups remain on a PC when it is removed from a domain and will function normally if that PC is re-joined to the same domain.

Most of the automation settings in Sysprep can be easily configured with setupmgr.exe.  This link has a step-by-step procedure for making your sysprep.inf file using the GUI interface.

The sysprep help file is also actually helpful!

Expert Comment

ID: 21754223

Expert Comment

ID: 21754262
Just to clarify, the question is how to add "Domain Admins" specifically and not just any arbitrary group, right?  In that case, no script is necessary.  Domain Admins is always added to the PC's Administrators group when a PC is joined to a domain.

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Virtualization software lets you run different versions of Windows, Ubuntu Linux and other versions of Linux all at the same time, rather than running each one directly from your computer's hard drive.
There’s hardly a doubt that Business Communication is indispensable for both enterprises and small businesses, and if there is an email system outage owing to Exchange server failure, it definitely results in loss of productivity.
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
In this video, viewers will be given step by step instructions on adjusting mouse, pointer and cursor visibility in Microsoft Windows 10. The video seeks to educate those who are struggling with the new Windows 10 Graphical User Interface. Change Cu…

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question