add a domain user account to the local administrator on 200 PC's

[ZipperHeadMan]

Any thought on how to add a domain user to a local admin account on a PC?
GPO in a 2k3 enviroment perferred.


thanks

 

[Roadki11]

I attacked this a while back a little differently. I wanted to add a domain group to the local administrators group on all my pc's. i did it this way so i would have more flexibility of adding and removing domain users from that local admin group through AD, people hired or fired and what not. i used the following link as a guide.

http://www.microsoft.com/technet/scriptcenter/resources/qanda/sept05/hey0923.mspx

Good luck,

RoadKi11

 

[porkchopexpress]

You can use restricted groups for this. Remember that you need to specify all accounts that you want in the local group as any you don't list will be removed.

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html