Solved

Need Script to add local admin to global admin group On all computers at the same time

Posted on 2009-05-19
14
462 Views
Last Modified: 2012-05-07
Need Script to add local admin to global admin group On all computers at the same time

Make sure i want to add it to all computers at same time... NOT one by one..

Thanks
Hardeep
0
Comment
Question by:Hardeep_Saluja
  • 6
  • 3
  • 2
14 Comments
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24420181

How many computers? Using Group Policy would probably be a better option. It wouldn't be all at once, but not much will.

For VbScript, to do it all at once you'd have to run as many VbScripts as you have computers. Why does it have to be all at once and not sequential?

Chris
0
 
LVL 43

Accepted Solution

by:
Steve Knight earned 250 total points
ID: 24420270
It could be run on all machines that are on using a VB Script or similar looping through machines.  I would do it using Group Policy personally if your OU structure is planned with computers, servers etc. in different containers?

Or you could create a startup script to make the change as people boot their computers up - assuming here that users do not have admin rights so they won't be able to do it from a login script.

Steve
0
 
LVL 43

Expert Comment

by:Steve Knight
ID: 24420277
Sorry for duplication, hadn't refreshed there from opening before...

Steve
0
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24420303

No worries, happens to everyone :)

Chris
0
 
LVL 6

Author Comment

by:Hardeep_Saluja
ID: 24421502
Hi i have the script for one machine at a time...
Also, using group polciy would not be recommended as it would replace existing groups for a local administrator account

Any script which can add global admin for a domain like <domain>\global admin to a local administrator account for aparticular set of machines at the same time..?

Thanks
Hardeep
0
3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

 
LVL 70

Assisted Solution

by:Chris Dent
Chris Dent earned 250 total points
ID: 24421574

> Also, using group polciy would not be recommended as it would replace existing
> groups for a local administrator account

It doesn't have to, it depends entirely on how you do it. Granted the regular approach does just as you describe and is a pain. But it isn't the only way.

The alternative is to create a new restricted group, use  the name of the domain group "global admin", then select the MemberOf option and add "Administrators". It'll find the Domain local group at that point but it doesn't matter, it will work. Just make sure the policy only applies to workstations.

I use the method Steve suggested personally, a little computer startup script that runs:

net localgroup Administrators /add "domain\global admin"

It's really lovely and simple.

Chris
0
 
LVL 43

Expert Comment

by:Steve Knight
ID: 24421812
Me again... yes that is what I did for one client that didn't want Group policy fiddled with.

The group policy options both work nicely depending upon what you want to do -- again in one case it was wanted to specifically replace the administrators group contents, i.e. clear out any unauthorised local admins.  The other option Chris has suggested will neatly sort out adding a new entry too.

Always easier when planned into the AD from the start which I have had the pleasure of designing a few from scratch but always do-able to retro-fit too.

Steve
0
 
LVL 6

Author Comment

by:Hardeep_Saluja
ID: 24590198
Sorry none solution accepted as i have 4000+ users and i cannot apply GP to all
I wanted a script .. Thanks
0
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24590334

Hey,

What's wrong with the logon script approach?

Chris
0
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24590470

I'll happily help you here if you can define the terms you want the script to run under and why the login script method is no help.

Chris
0
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24636460

I recommend:

Split: dragon-it (http:#24420270), and Chris-Dent (http:#24421574)

I had contemplated suggesting reducing the points available for this question because of the duplication. It seems wrong to delete when the solutions offered here are exactly equivalent to the VbScript offerings in the newer thread.

Chris
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

It is a general practice to get rid of old user profiles on a computer  in a LAN environment. As I have been working with a company in a LAN environment where users move from one place to some other place at times. This will make many user profil…
This article is meant to give a basic understanding of how to use R Sweave as a way to merge LaTeX and R code seamlessly into one presentable document.
Learn the basics of strings in Python: declaration, operations, indices, and slicing. Strings are declared with quotations; for example: s = "string": Strings are immutable.: Strings may be concatenated or multiplied using the addition and multiplic…
Learn the basics of lists in Python. Lists, as their name suggests, are a means for ordering and storing values. : Lists are declared using brackets; for example: t = [1, 2, 3]: Lists may contain a mix of data types; for example: t = ['string', 1, T…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now