How to make AD User member of Administrators Group on Local Machine

Can someone tell me how I make a domain user an administrator on a local machine.
I tried logging onto the local machine as a domain administrator but the machine does not see my domain user account. I would have thought that this could be achieved through AD Users and Computers on the server but I can't find where.
MattWilkinsonAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Brian PiercePhotographerCommented:
if yopu want to do this you can - but be aware making ALL users local admins in no necessary and has serious security consequeces

For a single computer
logon as Local Administrator to the computer (not the domain)
Right click on "My Computer" and select Manage
Expand "Local Users and Groups->Groups->Administrators
Click Add
Enter the full user name eg domain\username
and OK out again

You can add users to Local Administrators with group policy.

First put the users that you want to give local admin rights to into a security group (or you Domain Users if you want it to apply to all users)

Create and OU that contains the computers that you want them to have rights on and put the computers into the OU. Note that this cannot be the Computers Container and should not contain any servers or Domain Controllers for obvious reasons.

Create a group policy that configures the security group as a Restricted Group, and under the "This group is a member of...", option add "Administrators"

Link the GPO to the OU that contains the computers

Run gpupate/force to update the policy

See http://support.microsoft.com/kb/810076
0
MattWilkinsonAuthor Commented:
I solved this issue - the problem was that the right click manage groups option does not allow you to add a domain user (whether you log onto the domain or as local admin)

I managed to do this by using control panel user account and adding it there. I could add the user when logged onto the local machine with a domain admin account
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Brian PiercePhotographerCommented:
>> I solved this issue - the problem was that the right click manage groups option does not allow you to add a domain user (whether you log onto the domain or as local admin) <<

Oh yes its does !
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.