Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Assigning local admin rights to users through a group in AD?

Posted on 2013-06-25
4
Medium Priority
?
189 Views
Last Modified: 2014-01-11
I would like to assign users to a AD group that has admin rights, so when they log in on their own pc's they have rights to load software etc. I do not want to set up each user on each pc. Trying to find a way to push the admin rights to users for local admin, or enough rights to load software, etc.
0
Comment
Question by:jaybird10
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 3

Expert Comment

by:nodemaster
ID: 39275109
Are you familiar with creating and assigning Group Policies?
0
 

Author Comment

by:jaybird10
ID: 39275118
Yes, but can you do local level pc admin rights through there? I do not want domain level rights
0
 
LVL 3

Assisted Solution

by:phoenix5ire
phoenix5ire earned 1000 total points
ID: 39275128
You can create a unique "local Admin" AD security group and add the users you want to install software into this "local Admin" group. In each computer, add the AD "local Admin" group into the computer's Administrators group. Repeat this for each computer you want users to install software on their own or use a GPO (Group Policy) to apply this policy to the computers.

You can automatically script this "local Admin" AD group to each computer as well, this tutorial will show you how:
Add AD User/Group to Local Administrator Group
0
 
LVL 3

Accepted Solution

by:
nodemaster earned 1000 total points
ID: 39275164
You can also use Computer Configuration in a GPO to add a single, local account with administrative rights on each system. The password will of course be the same initially, but you can force the users to change it on first logon and instruct them to set it to something only they know.
This will allow them to log off of the network as a standard user, then log back in with a local account to make system changes, install drivers, install software, etc.
0

Featured Post

Will your db performance match your db growth?

In Percona’s white paper “Performance at Scale: Keeping Your Database on Its Toes,” we take a high-level approach to what you need to think about when planning for database scalability.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As dyndns has reduced the capabilities of the free service, I looked around for other free providers of Dynamic DNS service. After testing several I decided to move my DNS hosting to Hurricane Electric as then domains that require dynamic hostnam…
Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question