Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Assigning "domain user" to "local admin" on select PCs

17 Dec 2009   #1

Win7(x64)
 
 
Assigning "domain user" to "local admin" on select PCs

I'd like to assign a few select "domain users" to be local admin over their test machines which log into a domain. The test machines are Windows 7 64bit and the domain is Win2k8 R2. I have been searching around for the best way to do it but I've come up short on my search.

Anyone know off the top of their head?

Thanks


My System SpecsSystem Spec
.

18 Dec 2009   #2

Windows 7 Ultimate x64
 
 

Create a new group in AD, for example, TestUsers
Add the required users to the group
Go round each machine and add the group as a member of local admins.
My System SpecsSystem Spec
18 Dec 2009   #3

Windows 7 Ultimate (64)
 
 

At the server go to user settings and add them to the domain administrator group.
My System SpecsSystem Spec
.


18 Dec 2009   #4

Windows 7 Ultimate x64
 
 

Quote   Quote: Originally Posted by win7clutz View Post
At the server go to user settings and add them to the domain administrator group.
That's not good advice at all, that will make all those users administrators across the entire domain which I don't think is the desired effect and could become quite a security issue.
My System SpecsSystem Spec
18 Dec 2009   #5

Win7(x64)
 
 

Quote   Quote: Originally Posted by DC187 View Post
Quote   Quote: Originally Posted by win7clutz View Post
At the server go to user settings and add them to the domain administrator group.
That's not good advice at all, that will make all those users administrators across the entire domain which I don't think is the desired effect and could become quite a security issue.
Correct. I don't want them to be domain admins. Just local admins on specific test machines.

Thanks everyone!
My System SpecsSystem Spec
18 Dec 2009   #6

Windows 7 Ultimate 64bit
 
 

Not sure how simple or complicated your actual task is
Simple? try this
to add someone to a group
net localgroup GroupName UserName /add
to remove
net localgroup GroupName UserName /delete
complicated?
Google, manage group membership + powershell
My System SpecsSystem Spec
24 Mar 2010   #7

All Windows / Dos
 
 

Quote   Quote: Originally Posted by jeffc View Post
I'd like to assign a few select "domain users" to be local admin over their test machines which log into a domain. The test machines are Windows 7 64bit and the domain is Win2k8 R2. I have been searching around for the best way to do it but I've come up short on my search.

Anyone know off the top of their head?

Thanks

Too easy Jeff - all you need to do is:
  1. log in to each "test" PC as the local admin
  2. Go to "Control Panel", "User Accounts"
  3. Go to "Manage User Accounts", then the "Advanced" Tab
  4. Click on the "Advanced" button in the middle of the form
  5. Open the "Groups" folder, then double-click on the "Administrators" group.
  6. Click "Add", then add the relevant user (Username@Domain)
  7. OK (etc) to close all the windows.
  8. Log off the local admin account, then log in to the domain user and test.
My System SpecsSystem Spec
12 Mar 2012   #8

Windows 7 pro 32bit
 
 
The "Wizard" Way

Quote   Quote: Originally Posted by Tempest View Post
Quote   Quote: Originally Posted by jeffc View Post
I'd like to assign a few select "domain users" to be local admin over their test machines which log into a domain. The test machines are Windows 7 64bit and the domain is Win2k8 R2. I have been searching around for the best way to do it but I've come up short on my search.

Anyone know off the top of their head?

Thanks

Too easy Jeff - all you need to do is:
  1. log in to each "test" PC as the local admin
  2. Go to "Control Panel", "User Accounts"
  3. Go to "Manage User Accounts", then the "Advanced" Tab
  4. Click on the "Advanced" button in the middle of the form
  5. Open the "Groups" folder, then double-click on the "Administrators" group.
  6. Click "Add", then add the relevant user (Username@Domain)
  7. OK (etc) to close all the windows.
  8. Log off the local admin account, then log in to the domain user and test.
Tempest would you call this the "Wizard" way of doing this? For years I've always gone through computer management to add domain users to local groups however my new boss just informed me that I must use the wizard to do these things, "that's why their there." Yet he could not tell me what exactly the wizard way of adding a domain user to the administrators group on a local win 7 machine is.
My System SpecsSystem Spec
19 Nov 2012   #9

Windows 7 64 Bit, Windows 8 64 Bit Build 8102
 
 

Note, you can also do this through MMC 3.0 snap ins at your own PC. Just launch it up, connect to another computer, and do anything you desire through there.
My System SpecsSystem Spec
Reply

 Assigning "domain user" to "local admin" on select PCs




Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:00 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33