I have a VMware View Windows 7 linked clone desktop environment. For one of my users, I am working on a logon script that will make his domain account a local admin on his desktop. As these desktops are linked clones, I cannot add him as local admin on the golden image, because he would then be local admin on all desktops. I created a new GPO on my Windows Server 2008 R2 domain controller linked in the Linked Clones OU. I added the VMware View Agent Configuration template to this GPO. I then set the following:
Computer Configuration\Policies\Administrative Templates\Classic Administrative Templates (ADM)\VMware View Agent Configuration\Agent Configuration\CommandsToRunOnConnect --> set to Enabled and command configured "CMD /C c:\scripts\logonlocaladmin.bat"
This .bat script looks like:
NET LOCALGROUP Administrators HCNET\%USERNAME% /ADD
I logged into this desktop through View and ran a gpupdate /force using admin credentials. I then ran gpresult /r and verified that this gpo is applied to the desktop. I then restarted this desktop, logged back into the machine using View as the user that owns the desktop, and took a look at the Local Users and Groups. This user does not show in the Administrators group. What am I doing wrong here? I have taken a look at multiple forum posts and this script command should work. Is there something I am missing?