How To Add/Remove Groups To "Local Admins" Remotely To Multiple Computers

Posted on 2010-01-07
Last Modified: 2013-11-25
Hey All -

I've got a lot of domain-joined workstations that require me to add and sometimes remove "Domain Users" to "Local Administrators" for our software.

I know how to add them the following ways:
* Adding Domain Users to Local Admins while logged into the workstation through computer management.
* Doing the process above but from one computer choosing the "Connect To Remote Computers" option in computer management and browsing to each computer

What I'm after is a way to do it globally and many machines at once since the above methods take forever.  Something like a group policy settings would be perfect.  Someone suggested that I could create a security group and add their AD account to it's membership, but I don't know how to configure a security group to do that.

The reason that I need local admins is because our software is written to where changes need to be made for it to work correctly.  I want to disable Local Admins for security purposes, but this software requires it.

Any suggestions are appreciated - Thanks!
Question by:BzowK
    LVL 57

    Accepted Solution

    You can use restricted groups using group policy.  Great blog by florian here
    As you can see you can either add to what is there or wipe out and define your own admins.
    Definitely test this out first so you get a feel for it.

    Author Closing Comment

    It worked perfectly - Thanks!

    Featured Post

    Do You Know the 4 Main Threat Actor Types?

    Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

    Join & Write a Comment

    Today companies are subjected to more-and-more data, and it won't stop any time soon.  But there are obvious opportunities for reducing data, particularly data duplicated among companies.
    Healthcare organizations in the United States must adhere to the guidance of both the HIPAA (Health Insurance Portability and Accountability Act) and HITECH (Health Information Technology for Economic and Clinical Health Act) for securing and protec…
    The viewer will learn common shortcuts with easy ways to remember them. The viewer will then learn where to find all of the keyboard shortcuts, how to create/change them, and how to speed up their workflow.
    The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now