Page 1 of 1 1
Topic Options
#113199 - 2004-02-03 03:08 PM Adding a user to local Administrators group
sharp Offline
Lurker

Registered: 2004-02-03
Posts: 2
Hi,

Can I add a network user to the local Administrators group in Windows 2000 and Windows XP?

Thanx already.

Top
#113200 - 2004-02-03 03:16 PM Re: Adding a user to local Administrators group
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
sure.
go onto command prompt and type:
net help localgroup
_________________________
!

download KiXnet

Top
#113201 - 2004-02-03 04:46 PM Re: Adding a user to local Administrators group
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11165
Loc: Boston, MA, USA
It is not recommended and against even the most basic security guidelines to make regular users part of an administrative group. Please state the exact reason why domain users need to be local administrators as there might be secure alternatives.
_________________________
There are two types of vessels, submarines and targets.

Top
#113202 - 2004-02-03 04:53 PM Re: Adding a user to local Administrators group
sharp Offline
Lurker

Registered: 2004-02-03
Posts: 2
Some programs are installed while running the login script. And some of those programs need Administrator rights. Power User rights aren't enough.
Top
#113203 - 2004-02-03 05:15 PM Re: Adding a user to local Administrators group
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
specially on XP.
my policy is to add users to admins on every XP machine.
_________________________
!

download KiXnet

Top
#113204 - 2004-02-03 05:29 PM Re: Adding a user to local Administrators group
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11165
Loc: Boston, MA, USA
Then install applications via GPO or other alternative remote install options, e.g. Task Scheduler.
_________________________
There are two types of vessels, submarines and targets.

Top
#113205 - 2004-02-03 07:58 PM Re: Adding a user to local Administrators group
Radimus Moderator Offline
Moderator
*****

Registered: 2000-01-06
Posts: 5187
Loc: Tampa, FL
there is very little reason why a given user can't be local admin on a specific workstation.

the worst they can do is fubar it, in which a re-image is good enough
_________________________
How to ask questions the smart way <-----------> Before you ask

Top
#113206 - 2004-02-03 08:09 PM Re: Adding a user to local Administrators group
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
Even though I'm dead set against making users local admins, our helpdesk uses that approach as the easy way out. I also don't like to see software pushed out via logon script. There are far better ways to do it.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#113207 - 2004-02-03 08:24 PM Re: Adding a user to local Administrators group
Radimus Moderator Offline
Moderator
*****

Registered: 2000-01-06
Posts: 5187
Loc: Tampa, FL
which is one of the things that I am working on now... an automated patch management script that will run as a service that will pull down patches, MSIs, and AV dats and install them without user interaction as long as the PC is on.

with this running correctly, we will no longer need the users to be local admin.
_________________________
How to ask questions the smart way <-----------> Before you ask

Top
#113208 - 2004-02-03 08:28 PM Re: Adding a user to local Administrators group
ShaneEP Moderator Offline
MM club member
*****

Registered: 2002-11-29
Posts: 2127
Loc: Tulsa, OK
Quote:

the worst they can do is fubar it, in which a re-image is good enough




Thats exactly the problem. Do you know how much money it would cost in shipping alone to ship all the FUBARed machines to where the PC techs are...just to be re-imaged...And FUBARed again in a couple of months.

Top
#113209 - 2004-02-03 08:45 PM Re: Adding a user to local Administrators group
Radimus Moderator Offline
Moderator
*****

Registered: 2000-01-06
Posts: 5187
Loc: Tampa, FL
why ship a computer? the image can be placed on CDs and mailed (or on an external USB HD), the image can be spun onto a harddrive and mailed (it doesn't take a great deal of knowledge or skill to swap drives in the newer corporate machines), with a high speed connection, a floppy image can be emailed with instructions on how to extract to a disk which will connect a PC to a networked image, and in some case the PC could be PXE booted to a RIS server.

Mailing PCs is slow and cumbersome to just re image a fubared install.
_________________________
How to ask questions the smart way <-----------> Before you ask

Top
#113210 - 2004-02-03 08:50 PM Re: Adding a user to local Administrators group
ShaneEP Moderator Offline
MM club member
*****

Registered: 2002-11-29
Posts: 2127
Loc: Tulsa, OK
So what do you do about adding the machine to the domain and setting up user specific settings after the image is blown to it?
Top
#113211 - 2004-02-03 09:14 PM Re: Adding a user to local Administrators group
MightyR1 Offline
MM club member
*****

Registered: 1999-09-09
Posts: 1264
Loc: The Netherlands
www.altiris.com

(No, I do not work for this company )
_________________________
Greetz,
Patrick Rutten

- We'll either find a way or make one...
- Knowledge is power; knowing how to find it is more powerful...
- Problems don't exist; they are challenges...

Top
#113212 - 2004-02-03 09:28 PM Re: Adding a user to local Administrators group
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
obviously, user specific settings and domain stuff are automated.
ofcourse.
why would you otherwise even do image?
_________________________
!

download KiXnet

Top
#113213 - 2004-02-03 10:11 PM Re: Adding a user to local Administrators group
Radimus Moderator Offline
Moderator
*****

Registered: 2000-01-06
Posts: 5187
Loc: Tampa, FL
the only thing I do to an image is name the machine and add the user to local admin... which I have a script to do.

these can be done remotely
_________________________
How to ask questions the smart way <-----------> Before you ask

Top
#113214 - 2004-02-03 10:27 PM Re: Adding a user to local Administrators group
ShaneEP Moderator Offline
MM club member
*****

Registered: 2002-11-29
Posts: 2127
Loc: Tulsa, OK
I wasnt trying to start an argument by the way...

Was just curious as there has been talk around here of having all PCs imaged and drop-shipped straight from supplier. Have yet to figure out how we would then name them, add them to the domain, and set up all the apps like Lotus Notes which is very user specific.

Top
#113215 - 2004-02-03 10:29 PM Re: Adding a user to local Administrators group
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11165
Loc: Boston, MA, USA
You'd do all of this with scripts that run after the SysPrep-image is done. Very straight-forward stuff, except for writing all these scripts.
_________________________
There are two types of vessels, submarines and targets.

Top
Page 1 of 1 1


Moderator:  Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 1955 anonymous users online.
Newest Members
Viginette, ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder
17888 Registered Users

Generated in 0.143 seconds in which 0.067 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org