none
local admin access on all PCs

    Question

  • Dear All,
    We need to create account and configure it to have local admin access on all PCs (5000+) ie through
    using group policy or any method.

    kindly guide me, thanks in advance...

    Friday, April 21, 2017 10:10 AM

All replies

  • Hi,

    Please check this link.

    

    Friday, April 21, 2017 10:39 AM
  • Dear All,
    We need to create account and configure it to have local admin access on all PCs (5000+) ie through
    using group policy or any method.

    kindly guide me, thanks in advance...

    Hi

     You should configure "Restricted Groups" policy then apply this to computers for add this user&group to clients local administrators group.

    Follow the steps on this article;

    http://www.frickelsoft.net/blog/?p=13


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    Friday, April 21, 2017 10:52 AM
  • I would suggest you create a domain group for this purpose, then make the user a member of this group. Use the Restricted Groups feature of Group Policy the make this group a member of the local Administrators group on all computers, as suggested. This way in the future you only need to manage the membership of the domain group to add, replace, or remove users with local admin privileges.

    Richard Mueller - MVP Enterprise Mobility (Identity and Access)

    Friday, April 21, 2017 4:29 PM
  • Hi,
    As others suggested, you could use "Restricted Groups" policy to set up local admin on all PCs, here is a step-by-step guide to configure "Restricted Groups", please refer to: https://social.technet.microsoft.com/wiki/contents/articles/20402.active-directory-group-policy-restricted-groups.aspx
    Best regards, 
    Wendy

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Monday, April 24, 2017 7:14 AM
    Moderator