Need Script to add local admin to global admin group On all computers at the same time

Need Script to add local admin to global admin group On all computers at the same time

Make sure i want to add it to all computers at same time... NOT one by one..

Thanks
Hardeep
LVL 6
Hardeep_SalujaAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
Steve KnightConnect With a Mentor IT ConsultancyCommented:
It could be run on all machines that are on using a VB Script or similar looping through machines.  I would do it using Group Policy personally if your OU structure is planned with computers, servers etc. in different containers?

Or you could create a startup script to make the change as people boot their computers up - assuming here that users do not have admin rights so they won't be able to do it from a login script.

Steve
0
 
Chris DentPowerShell DeveloperCommented:

How many computers? Using Group Policy would probably be a better option. It wouldn't be all at once, but not much will.

For VbScript, to do it all at once you'd have to run as many VbScripts as you have computers. Why does it have to be all at once and not sequential?

Chris
0
 
Steve KnightIT ConsultancyCommented:
Sorry for duplication, hadn't refreshed there from opening before...

Steve
0
Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

 
Chris DentPowerShell DeveloperCommented:

No worries, happens to everyone :)

Chris
0
 
Hardeep_SalujaAuthor Commented:
Hi i have the script for one machine at a time...
Also, using group polciy would not be recommended as it would replace existing groups for a local administrator account

Any script which can add global admin for a domain like <domain>\global admin to a local administrator account for aparticular set of machines at the same time..?

Thanks
Hardeep
0
 
Chris DentConnect With a Mentor PowerShell DeveloperCommented:

> Also, using group polciy would not be recommended as it would replace existing
> groups for a local administrator account

It doesn't have to, it depends entirely on how you do it. Granted the regular approach does just as you describe and is a pain. But it isn't the only way.

The alternative is to create a new restricted group, use  the name of the domain group "global admin", then select the MemberOf option and add "Administrators". It'll find the Domain local group at that point but it doesn't matter, it will work. Just make sure the policy only applies to workstations.

I use the method Steve suggested personally, a little computer startup script that runs:

net localgroup Administrators /add "domain\global admin"

It's really lovely and simple.

Chris
0
 
Steve KnightIT ConsultancyCommented:
Me again... yes that is what I did for one client that didn't want Group policy fiddled with.

The group policy options both work nicely depending upon what you want to do -- again in one case it was wanted to specifically replace the administrators group contents, i.e. clear out any unauthorised local admins.  The other option Chris has suggested will neatly sort out adding a new entry too.

Always easier when planned into the AD from the start which I have had the pleasure of designing a few from scratch but always do-able to retro-fit too.

Steve
0
 
Hardeep_SalujaAuthor Commented:
Sorry none solution accepted as i have 4000+ users and i cannot apply GP to all
I wanted a script .. Thanks
0
 
Chris DentPowerShell DeveloperCommented:

Hey,

What's wrong with the logon script approach?

Chris
0
 
Chris DentPowerShell DeveloperCommented:

I'll happily help you here if you can define the terms you want the script to run under and why the login script method is no help.

Chris
0
 
Chris DentPowerShell DeveloperCommented:

I recommend:

Split: dragon-it (http:#24420270), and Chris-Dent (http:#24421574)

I had contemplated suggesting reducing the points available for this question because of the duplication. It seems wrong to delete when the solutions offered here are exactly equivalent to the VbScript offerings in the newer thread.

Chris
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.