Assigning "domain user" to "local admin" on select PCs


  1. Posts : 12
    Win7(x64)
       #1

    Assigning "domain user" to "local admin" on select PCs


    I'd like to assign a few select "domain users" to be local admin over their test machines which log into a domain. The test machines are Windows 7 64bit and the domain is Win2k8 R2. I have been searching around for the best way to do it but I've come up short on my search.

    Anyone know off the top of their head?

    Thanks :)
      My Computer


  2. Posts : 79
    Windows 7 Ultimate x64
       #2

    Create a new group in AD, for example, TestUsers
    Add the required users to the group
    Go round each machine and add the group as a member of local admins.
      My Computer


  3. Posts : 519
    Windows 7 Ultimate (64)
       #3

    At the server go to user settings and add them to the domain administrator group.
      My Computer


  4. Posts : 79
    Windows 7 Ultimate x64
       #4

    win7clutz said:
    At the server go to user settings and add them to the domain administrator group.
    That's not good advice at all, that will make all those users administrators across the entire domain which I don't think is the desired effect and could become quite a security issue.
      My Computer


  5. Posts : 12
    Win7(x64)
    Thread Starter
       #5

    DC187 said:
    win7clutz said:
    At the server go to user settings and add them to the domain administrator group.
    That's not good advice at all, that will make all those users administrators across the entire domain which I don't think is the desired effect and could become quite a security issue.
    Correct. I don't want them to be domain admins. Just local admins on specific test machines.

    Thanks everyone! :)
      My Computer


  6. Posts : 257
    Windows 7 Ultimate 64bit
       #6

    Not sure how simple or complicated your actual task is
    Simple? try this
    to add someone to a group
    net localgroup GroupName UserName /add
    to remove
    net localgroup GroupName UserName /delete
    complicated?
    Google, manage group membership + powershell
      My Computer


  7. Posts : 1
    All Windows / Dos
       #7

    jeffc said:
    I'd like to assign a few select "domain users" to be local admin over their test machines which log into a domain. The test machines are Windows 7 64bit and the domain is Win2k8 R2. I have been searching around for the best way to do it but I've come up short on my search.

    Anyone know off the top of their head?

    Thanks :)

    Too easy Jeff - all you need to do is:
    1. log in to each "test" PC as the local admin
    2. Go to "Control Panel", "User Accounts"
    3. Go to "Manage User Accounts", then the "Advanced" Tab
    4. Click on the "Advanced" button in the middle of the form
    5. Open the "Groups" folder, then double-click on the "Administrators" group.
    6. Click "Add", then add the relevant user (Username@Domain)
    7. OK (etc) to close all the windows.
    8. Log off the local admin account, then log in to the domain user and test.
    Last edited by Tempest; 24 Mar 2010 at 20:48. Reason: Minor edit for clarity
      My Computer


  8. Posts : 1
    Windows 7 pro 32bit
       #8

    The "Wizard" Way


    Tempest said:
    jeffc said:
    I'd like to assign a few select "domain users" to be local admin over their test machines which log into a domain. The test machines are Windows 7 64bit and the domain is Win2k8 R2. I have been searching around for the best way to do it but I've come up short on my search.

    Anyone know off the top of their head?

    Thanks :)

    Too easy Jeff - all you need to do is:
    1. log in to each "test" PC as the local admin
    2. Go to "Control Panel", "User Accounts"
    3. Go to "Manage User Accounts", then the "Advanced" Tab
    4. Click on the "Advanced" button in the middle of the form
    5. Open the "Groups" folder, then double-click on the "Administrators" group.
    6. Click "Add", then add the relevant user (Username@Domain)
    7. OK (etc) to close all the windows.
    8. Log off the local admin account, then log in to the domain user and test.
    Tempest would you call this the "Wizard" way of doing this? For years I've always gone through computer management to add domain users to local groups however my new boss just informed me that I must use the wizard to do these things, "that's why their there." Yet he could not tell me what exactly the wizard way of adding a domain user to the administrators group on a local win 7 machine is.
      My Computer


  9. Posts : 3
    Windows 7 64 Bit, Windows 8 64 Bit Build 8102
       #9

    Note, you can also do this through MMC 3.0 snap ins at your own PC. Just launch it up, connect to another computer, and do anything you desire through there.
      My Computer


  10. Posts : 1
    Win8.1 64bit
       #10

    Easiest way to administer local admins


    How to make a user a local admin on just one computer, by just adding this computer’s name to the user’s Description in AD. security - Group Policy: Administrator Rights for Specific Users on Specific Computers - Server Fault Works in 8.1 and Win 7, just one short script an a oneliner GPO.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 05:52.
Find Us