Add user account to local admin group 1

[alpinistulvesel]

I must migrate a part of users, computers, groups and security from my old Windows 2000 domain to a new Windows 2008 domain using ADMT 3.1.
One of the prerequirements is to add the account that will be used to run ADMT 3.1. on target domain to local administrators group on every machine from the old windows 2000 domain.
I mention that all the machines are running Windows XP SP1 or better. The account that I must add belongs to the new Windows 2008 domain. Between Windows 2000 domain and Windows 2008 domain was established a two-way trust relationship.
I'm in a great hurry. Can you help me with some advices about the best way to add account to local admin group using GPO or some scripting?

 

[ashpp]

Use restricted groups

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

 

[alpinistulvesel]

Hello ashpp,
I tried what you suggested, but it seems that it’s no effect. Actually, it seems that GPOs policy didn’t applied. Can you help me, please?

 

[58sniper]

Restricted Groups is the recommended way of doing what you're asking. If the policy isn't getting applied, that's a whole other story. What have you researched about policies not being applied? What have you tested? What do the logs say?

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/