Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Adding 'Domain Users' to local Administrators group with Group Policy

Posted on 2011-02-13
6
Medium Priority
?
1,541 Views
Last Modified: 2012-05-11
Hello all,

We are replacing one of our client's old 2003 SBS servers with a 2011 SBS server.
We haven't used Group Policy much with any of our clients but I have decided that it'd be worth using to try and cut down the time it takes to setup the individual client machines.

I would like to add 'Domain Users' as local administrator on each machine, obviously not the server.

Is this possible?

Thanks in advance

Arran
0
Comment
Question by:systemagic
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 37

Accepted Solution

by:
Neil Russell earned 400 total points
ID: 34882540
0
 
LVL 77

Assisted Solution

by:Rob Williams
Rob Williams earned 800 total points
ID: 34882680
I agree restricted groups is the way to do so, but just a warning. If your admin account/s are in the wrong group it is very possible to lock your self out of all machines so review the policies carefully and be careful to whom you apply. The following is another article that may be of some help.
http://www.windowsecurity.com/articles/Using-Restricted-Groups.html
0
 
LVL 77

Assisted Solution

by:Rob Williams
Rob Williams earned 800 total points
ID: 34882700
By the way with SBS 2008/2011 you can also very easily do this form The Windows SBS console under users and groups | users | double click on the user | computers | make the user an admin of any machine you would like, and/or give them remote access to a PC.
0
Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

 
LVL 10

Assisted Solution

by:cbmm
cbmm earned 800 total points
ID: 34882729
another way of doing is by using psexec. this allows you to run a cmd remotely on each pc. you will have to download it. psexec \\computername cmd /c net localgroup administrators /add domain\userid
I use psexec alot, so i added it to the environment variables. Once you have the file extracted, browse to the directory via cmd prompt and run this.
psexec \\computername cmd /c net localgroup administrators /add domain\userid
0
 
LVL 10

Assisted Solution

by:cbmm
cbmm earned 800 total points
ID: 34882764
Here is another link using restricted groups. This is obvoiusly one of the best ways of doing this. Take a look here: http://www.windowsitpro.com/article/product-review/adding-a-global-group-to-the-local-administrators-group100759.aspx
0
 
LVL 1

Author Closing Comment

by:systemagic
ID: 34884539
Thank you all very much. I have managed to implement this.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The recent Petya-like ransomware attack served a big blow to hundreds of banks, corporations and government offices The Acronis blog takes a closer look at this damaging worm to see what’s behind it – and offers up tips on how you can safeguard your…
The well known Cerber ransomware continues to spread this summer through spear phishing email campaigns targeting enterprises. Learn how it easily bypasses traditional defenses - and what you can do to protect your data.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question