Workstation Add to Domain Procedure

[AJ1982]

Hello All,

When I add a workstation to a domain, I notice the \\DOMAINNAME\Domain Admins is added to the \\LOCALPC\Administrators group. Is there a way to change this on newly imported machines or better still all machines so that \\DOMAINNAME\LOCALNTADMINRIGHTS is made a member of the group as opposed to \\DOMAINNAME\Domain Admins.

Would be greatful to know if this can be done.

Thanks

 

[koquito]

Domain admins is always included into the Local admin group, once you join the computer to the Domain.
Think a little big, if you were in a company and you were the network administrator of a company, what could happen if that computer comes with a big problem and you dont belong to the local admin group and you are not the Local admin of that computer..? Who could fix the problem if the Local admin is on trip? A+, MCP, CCNA
marbinpr@hotmail.com

Keep fighting for your knowledge!

 

[AJ1982]

Ok ok, so how would I add more than just \\DOMAINNAME\Domain Admins to the list, eg, have them both.

As someone who I wanted to have local admin rights, obviosuly wouldnt need Domain Admin rights

Thanks again

 

[Zelandakh]

Create a group on the domain called LocalAdmins. Put the people in it who can play with the local settings. Go to the computer and in computer management, groups add the domain/LocalAdmins to the Administrators group.

 

[AJ1982]

How do I make this effect though to all newsly registered workstations, eg, is there a login script

Thanks again

 

[ashpp]

Hi,

A login script would require admin rights to add a admin so not a good idea.

Have you tried Sysprep?

http://www.microsoft.com/windows2000/downloads/tools/sysprep/default.asp

Ash.

 

[koquito]

IF that someone you want to add, has already a user account. The only thing you need is Go to Computer management-->Local USers and Groups-->Groups-->Administrators->And Click on Add (To add the user to that Group), then use the drop down arrow to search for your domain, then look for that particular user.
IF the user doenst have an account in your domain, Well make one for him if you have the rights to do it.
If you want more than one user to belong to the LOcal Admin Group of that computer, then group them all in one group (Name it the way you want), and then instead of looking for a user in your domain, look for this group when you hit the Add button. A+, MCP, CCNA
marbinpr@hotmail.com

Keep fighting for your knowledge!

 

[GlenJohnson]

This is getting a little confulsing. Almost starting to sound like fatmansuperstar is wanting a bunch of admins. If this is right, he's looking for trouble. What's the bottom line. Fatmansuperstar, WHAT are you trying to do? Thanks. Glen A. Johnson
Microsoft Certified Professional
glen@nellsgiftbox.com


"He who doubts nothing, knows nothing."
Greek proverb.

 

[AJ1982]

When I add a workstation to a domain, I notice the \\DOMAINNAME\Domain Admins is added to the \\LOCALPC\Administrators group. Is there a way to change this on newly imported machines or better still all machines so that \\DOMAINNAME\LOCALNTADMINRIGHTS is made a member of the group as opposed to \\DOMAINNAME\Domain Admins.

This needs to be applied whenANY machine registers or SysPreps,

Thanks