Solved

Adding AD users with Local Administrator Rights

Posted on 2012-04-08
9
526 Views
Last Modified: 2012-05-08
Hi Windows Experts,

Can someone provide me the steps on how to assign or provide AD users with Local Admin Rights only? I'm using Windows 2008

Thanks in Advance
0
Comment
Question by:d34dp00l13
9 Comments
 
LVL 8

Accepted Solution

by:
big_daddy0690 earned 250 total points
ID: 37821991
0
 
LVL 21

Expert Comment

by:motnahp00
ID: 37822011
You can also try this:

net localgroup Administrators your_ad_account /add
0
 

Author Comment

by:d34dp00l13
ID: 37822032
Thanks big_daddy0690, Is this applicable to 2008? I tried to follow it, but it seems this is for 2003.

Hi motnahp00, where do I execute this? on the AD Server or on the Workstation that I want the AD user to have access rights?
0
Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

 
LVL 21

Expert Comment

by:motnahp00
ID: 37822038
You can execute this from a command line on your applicable workstation or server. It will require an elevated command prompt for you to add an AD user as a local admin.
0
 
LVL 6

Expert Comment

by:jacobstewart
ID: 37822151
Does this need to be done for all users or just a one time thing?
0
 
LVL 21

Expert Comment

by:motnahp00
ID: 37822152
It's on a per user basis.
0
 
LVL 70

Expert Comment

by:KCTS
ID: 37822205
Don't do it on a per-user basis

Create a securiy group - call it something like 'LocalAdminusers'

Then use a restricted group to assign local admin rights to the group as detailed in a previous post (yes it works with 2008)

The advantage of using a group, it that is you want to modify who has local admin rights, all yiu need to do once the policy is in place is to add or remobe uses from the group to grant or demy them local admin rights.
0
 
LVL 21

Expert Comment

by:motnahp00
ID: 37822215
Nesting of domain groups to local groups is not supported with the net command.

Feel free to correct if I'm wrong to include an example.
0
 
LVL 10

Assisted Solution

by:Prashant Girennavar
Prashant Girennavar earned 250 total points
ID: 37822320
To accomplish above you have 2 options,

1. Use Restricted Groups in GPO
2. By the help of Scripts.

Using Restricted Groups in GPO.

 Please follow below link which explains about to use Restricted groups option to add domain users to local administrator account group.

http://www.windowsecurity.com/articles/using-restricted-groups.html

http://myitforum.com/cs2/blogs/rdixon/archive/2008/06/17/how-to-add-domain-accounts-to-local-administrators-group-using-gpo.aspx

Using Powershell Script.
Follow below link which include powershell script.

http://powershell.com/cs/media/p/2325.aspx

http://blogs.technet.com/b/heyscriptingguy/archive/2008/03/11/how-can-i-use-windows-powershell-to-add-a-domain-user-to-a-local-group.aspx

If I was you, then I would have configured Restricted Groups option.

Hope this helps.

Regards,

_Prashant_
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Synchronize a new Active Directory domain with an existing Office 365 tenant
Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html) provided 218 attendees with a step-by-step guide for identifying Acti…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question