Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


How To Add/Remove Groups To "Local Admins" Remotely To Multiple Computers

Posted on 2010-01-07
Medium Priority
Last Modified: 2013-11-25
Hey All -

I've got a lot of domain-joined workstations that require me to add and sometimes remove "Domain Users" to "Local Administrators" for our software.

I know how to add them the following ways:
* Adding Domain Users to Local Admins while logged into the workstation through computer management.
* Doing the process above but from one computer choosing the "Connect To Remote Computers" option in computer management and browsing to each computer

What I'm after is a way to do it globally and many machines at once since the above methods take forever.  Something like a group policy settings would be perfect.  Someone suggested that I could create a security group and add their AD account to it's membership, but I don't know how to configure a security group to do that.

The reason that I need local admins is because our software is written to where changes need to be made for it to work correctly.  I want to disable Local Admins for security purposes, but this software requires it.

Any suggestions are appreciated - Thanks!
Question by:BzowK
LVL 57

Accepted Solution

Mike Kline earned 2000 total points
ID: 26201980
You can use restricted groups using group policy.  Great blog by florian here
As you can see you can either add to what is there or wipe out and define your own admins.
Definitely test this out first so you get a feel for it.

Author Closing Comment

ID: 31674101
It worked perfectly - Thanks!

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I. Introduction There's an interesting discussion going on now in an Experts Exchange Group — Attachments with no extension . This reminded me of questions that come up here at EE along the lines of, "How can I tell the type of file from its cont…
High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Is your OST file inaccessible, Need to transfer OST file from one computer to another? Want to convert OST file to PST? If the answer to any of the above question is yes, then look no further. With the help of Stellar OST to PST Converter, you can e…

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question