Solved

Add user to Local admin group in windows XP & 2003

Posted on 2008-11-03
4
1,484 Views
Last Modified: 2012-05-05
Dear All,

I need to add one user to all local administrator groups in all workstations in the network. I can do this by using Restriction Group in group policy, but this will make a problem because it will delete all users inside the local administrator groups and put the one whos add in the restriction group.
I need to add one user without affecting the users membership in the local administrator group.

Please help me.
0
Comment
Question by:devdept
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 11

Expert Comment

by:theProfessa
ID: 22867298
0
 
LVL 13

Expert Comment

by:dhoffman_98
ID: 22867312
You can do this by using the "Member Of" function of the Restricted Group policy instead of using the "Members" function. The Members function will overwrite the existing settings. The Member Of function merges your change into the existing settings.

Create a group. Add the user to the group.
Create a policy using Restricted Groups, and select the group you created. Then in the bottom part of the next window, enter "Administrators" where it asks for "This group is a member of".

Note that you can not simply use the user object. You will need to put them into a group first, even if they are the only object in the group.

For more information: http://support.microsoft.com/kb/810076
0
 

Author Comment

by:devdept
ID: 22868911
Do i can use any script that can add users to the local group? if yes, does anyone can provide me this script
 
 
 
0
 
LVL 13

Accepted Solution

by:
dhoffman_98 earned 500 total points
ID: 22872120
You  can use the script in the link that "theProfessa" showed above. But if you have an AD environment already, then why not use the tools already built into AD? You were on the right track when you tried it the first time, you only made the mistake of using the wrong setting so that it would replace the existing settings instead of merging the changes.

Read the KB article and follow my suggestions and you will automatically have what you want without having to write scripts.

0

Featured Post

Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

632 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question