Click here to get back home

Local Administrators
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Local Administrators James 09-01-2006
Posted by James on September 1, 2006, 9:55 am
Please log in for more thread options
 I'm trying to set certain users as Administrators on their local computers
without the need to revisit this every time they change computers. A year
or so ago, I was given this information:

        Create a Domain Security Group (Installers). Set the Installers group as a
        member of the Administrators group on local computers. Add users to the
        Installers group.

This worked beautifully then, but I don't seem to be allowed to add a Server
Group to the Local Administrators Group anymore. It only allows me to add
Server Users; not groups.

I can add the group and it appears to be there, but once I exit the Users
dialog and re-enter the dialog, the group is gone.

Obviously, something changed. But what? How can I add a Security Group to
the Local Administrators Group?

Please help.

Thanks.

James

Posted by Anthony on September 1, 2006, 10:19 am
Please log in for more thread options
 I think you have several unconnected problems.
1) You need to be logged on as a local administrator of the PC to add to the
local Administrators group
2) Create any group in the domain and you should be able to add it to any
local group on a PC. If you can't, stick with that problem and forget
whether they are Installers or administrators, its just a problem of adding
domain groups to local groups
3) If you want to add ALL members of a group to the Administrators group on
ALL Pc's where you apply this, you should use Group Policy, Restricted
Groups. If you want to make a particular user an administrator of a
particular machine, you have a different logic problem and need to do it a
different way from group memberships.
Anthony


> I'm trying to set certain users as Administrators on their local computers
> without the need to revisit this every time they change computers. A year
> or so ago, I was given this information:
>
> Create a Domain Security Group (Installers). Set the Installers group as
> a
> member of the Administrators group on local computers. Add users to the
> Installers group.
>
> This worked beautifully then, but I don't seem to be allowed to add a
> Server
> Group to the Local Administrators Group anymore. It only allows me to add
> Server Users; not groups.
>
> I can add the group and it appears to be there, but once I exit the Users
> dialog and re-enter the dialog, the group is gone.
>
> Obviously, something changed. But what? How can I add a Security Group
> to
> the Local Administrators Group?
>
> Please help.
>
> Thanks.
>
> James



Posted by James on September 1, 2006, 11:07 am
Please log in for more thread options
Thanks for the help. Man, you guys are fast!!!

I'm sure I have been logged in as a local Administrator because when it
fails, I have logged off and tried other logins. And, it's weird because
when it happened and kept happening, I tried adding a Domain User to the
local Administrators Group and that works fine. I just don't seem to be
able to add a Domain Group as a local Administrator. So, I'll try again
tomorrow with the other ideas presented here.

It may all be a moot point, though, if I can do this same thing with Group
Policies. I do, in fact, want members of the Installers group to be local
Administrators on all computers. I'll have to take a look at this tomorrow
too. Can you give me a rough layout of how to do this with GP? I.e., what
setting(s) I should be looking for to accomplish this.

Thanks to all.

James

Posted by Anthony on September 1, 2006, 11:35 am
Please log in for more thread options
There isn't anything complicated about adding domain groups to local Groups,
so I would just play around with it till you find out what is going wrong.
As far as GP Restricted Groups are concerned, there's a ton of documentation
about it, so you might be better off having a look and then posting where
you get stuck.
If you decide to experiment, I suggest you set up a test OU with a test
policy on a test computer with a test user account. That way you will avoid
disasters,
Anthony


> Thanks for the help. Man, you guys are fast!!!
>
> I'm sure I have been logged in as a local Administrator because when it
> fails, I have logged off and tried other logins. And, it's weird because
> when it happened and kept happening, I tried adding a Domain User to the
> local Administrators Group and that works fine. I just don't seem to be
> able to add a Domain Group as a local Administrator. So, I'll try again
> tomorrow with the other ideas presented here.
>
> It may all be a moot point, though, if I can do this same thing with Group
> Policies. I do, in fact, want members of the Installers group to be local
> Administrators on all computers. I'll have to take a look at this
> tomorrow
> too. Can you give me a rough layout of how to do this with GP? I.e.,
> what
> setting(s) I should be looking for to accomplish this.
>
> Thanks to all.
>
> James



Posted by James on September 1, 2006, 2:54 pm
Please log in for more thread options
Avoid disasters? Now, that just takes all the fun out of it.

Thanks again.

James

Similar ThreadsPosted
Is local system account member of local Administrators group? June 21, 2005, 11:33 am
add user to local administrators group May 24, 2006, 4:00 am
Re-Enabling Local Administrators Account July 3, 2008, 2:37 am
Administrators , power user August 10, 2006, 6:14 am
Administrators do not have Owner Permissions August 16, 2006, 8:44 am
Deny folder access for administrators January 24, 2006, 4:28 am
AD administrators and domain admins groups April 25, 2006, 12:26 pm
How protect Administrators account and passwords June 7, 2007, 9:31 am
Administrators account fails on "copy" using C$ share July 11, 2005, 7:17 pm
"access denied" for members of Administrators, stand-alone server June 21, 2007, 1:48 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap