How To Add/Remove Groups To "Local Admins" Remotely To Multiple Computers
Posted on 2010-01-07
Hey All -
I've got a lot of domain-joined workstations that require me to add and sometimes remove "Domain Users" to "Local Administrators" for our software.
I know how to add them the following ways:
* Adding Domain Users to Local Admins while logged into the workstation through computer management.
* Doing the process above but from one computer choosing the "Connect To Remote Computers" option in computer management and browsing to each computer
What I'm after is a way to do it globally and many machines at once since the above methods take forever. Something like a group policy settings would be perfect. Someone suggested that I could create a security group and add their AD account to it's membership, but I don't know how to configure a security group to do that.
The reason that I need local admins is because our software is written to where changes need to be made for it to work correctly. I want to disable Local Admins for security purposes, but this software requires it.
Any suggestions are appreciated - Thanks!