Can anyone tell me where in Group Policy I can assign local administrator rights to the workstation on domain accounts? My domain admin account doesn't have local admin rights on the servers
In the Policy under Computer Configuration --> Windows Settings --> Restricted Groups you can add the Administrator group and then all of the account that you want in your local admin group. Doing this way will replace all of the accounts in the local group.
Another option if you just looking to add an account without replacing everything, is using the dos command, "net localgroup "Administrators" "Domain\Group" /add. You can create a batch file with this command and set it to run as a computer startup script in your policy.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.