Each Domain Account to be Admin in its Own Machine RRS feed

  • Question

  • Hello,

    I want a script to make each domain account a member of the local admin group in their respective machines.

    For example,

    UserA ---- Local Admein on MachineA

    UserB ----- Local Admin on MachineB

    I've tried to accomplish this using restricted group but i need something like %DOMAIN ACCOUNT% so that each account is added to its own local group in its own machine.

    %USERNAME% added the local user accounts but i want domain accounts.

    Please note that i am running on server 2003 DC, so i neither have PowerShell nor Group Policy Preferences.

    Appreciate your valuable response.

    Thursday, May 21, 2015 6:44 AM


All replies

  • This is not a very good idea.  Users should not run as admins. 

    There is no way to automatically do what you ask. You would have to add each user one at a time, to their machine. Sine you do notwant touse PowerShell you will need to use VBScript remotely. If you look in the repository you will find scripts for managing local grouos.


    Thursday, May 21, 2015 9:41 AM
  • Thanks for your reply.

    I want to make users to be admins on their machines to install software applications without the assistance from IT guys.  It is being a headache for IT guys each time a user asks for software installation.

    I will be more than glad if you have a better practice for this.

    Thursday, May 21, 2015 10:20 AM
  • Use Group Policy to distribute software.


    Thursday, May 21, 2015 10:42 AM
  • You should really be using something like System Center Configuration Manager (SCCM) to centrally manage application installs. This allows you to publish applications without having to give admin access. As JRV said, giving end users admin access is. No no really.

    Raf Delgado

    Friday, May 22, 2015 4:19 AM