Add Domain Admins to local Administrators Group - KiXtart.org - official site

You are not logged in. [Log In] KiXtart.org website » Forums » KiXtart » Basic Scripting » Add Domain Admins to local Administrators Group

Page 1 of 1

1

Topic Options

#31288 - 2002-10-23 09:41 PM Add Domain Admins to local Administrators Group
QA QA Lurker Registered: 2002-10-23 Posts: 2	Is there an easy way with KiXtart to add the Domain Admins to the local administrators group of the workstation? The only solution I currently see is: shell "admin.cmd" and admin.cmd has the following: net localgroup administrators "domainxx\domain admins" /add If there isn't a cleaner way to do this, I guess this is what I'll do. Thanks. [ 23. October 2002, 21:45: Message edited by: QA ] _________________________ Q.A.
Top

#31289 - 2002-10-23 09:46 PM Re: Add Domain Admins to local Administrators Group
Waltz Waltz Seasoned Scripter Registered: 2002-08-01 Posts: 485 Loc: Waterloo, Ontario, Canada	A quick BB search on 'add admin' returned... Adding users to the local admin group on remote pcs _________________________ We all live in a Yellow Subroutine...
Top

#31290 - 2002-10-23 09:54 PM Re: Add Domain Admins to local Administrators Group
QA QA Lurker Registered: 2002-10-23 Posts: 2	Thanks for the reply. That seems a bit more complicated than what I want. But to make this more clearer. I do have access to most of the workstations but a few users took it upon themselves to remove the domain admins from their computer. I figure the logon script would take care of this by using their account (assuming it has enough rights to do so). Thanks again! _________________________ Q.A.
Top

#31291 - 2002-10-23 10:31 PM Re: Add Domain Admins to local Administrators Group
Sealeopard Sealeopard KiX Master Registered: 2001-04-25 Posts: 11165 Loc: Boston, MA, USA	From within KiXtart, issue a code: shell '%COMSPEC% /c net localgroup administrators "domainxx\domain admins" /add' and your 'Domain Admins' will be added to the local administrators group if the current user has local administrative privileges. BTW, this is exactly the reason why regular users should not have local administrative privileges. _________________________ There are two types of vessels, submarines and targets.
Top

#31292 - 2002-10-24 12:03 AM Re: Add Domain Admins to local Administrators Group
Howard Bullock Howard Bullock KiX Supporter Registered: 2000-09-15 Posts: 5809 Loc: Harrisburg, PA USA	See URL-> GrpMaint.exe at my web site. _________________________ Home page: http://www.kixhelp.com/hb/
Top

#31293 - 2002-11-08 10:32 PM Re: Add Domain Admins to local Administrators Group
h00kupz h00kupz Fresh Scripter Registered: 2002-07-17 Posts: 14 Loc: Atlanta	Could you not just use: Run 'net localgroup "Administrators" "DOMAIN\Domain Admins" /add' ????? That's what I'm doing however it a couple of scenarios it's not working. _________________________ Select * from users where clue > 0 [b]0 rows affected.[/b]
Top

#31294 - 2002-11-08 10:37 PM Re: Add Domain Admins to local Administrators Group
Sealeopard Sealeopard KiX Master Registered: 2001-04-25 Posts: 11165 Loc: Boston, MA, USA	That is exactly what I wrote just two posts up in the thread! _________________________ There are two types of vessels, submarines and targets.
Top

#31295 - 2002-11-08 10:43 PM Re: Add Domain Admins to local Administrators Group
h00kupz h00kupz Fresh Scripter Registered: 2002-07-17 Posts: 14 Loc: Atlanta	Yes, Can you explain though the difference between: shell '%COMSPEC% /c net localgroup "Administrators" "DOMAIN\DOmain Admins" /add' Run 'net localgroup "Administrators" "DOMAIN\DOmain Admins" /add' ? _________________________ Select * from users where clue > 0 [b]0 rows affected.[/b]
Top

#31296 - 2002-11-08 10:44 PM Re: Add Domain Admins to local Administrators Group
Sealeopard Sealeopard KiX Master Registered: 2001-04-25 Posts: 11165 Loc: Boston, MA, USA	See Not quite everything you wanted to know about RUN and SHELL and RTFM. _________________________ There are two types of vessels, submarines and targets.
Top

#31297 - 2002-11-08 10:44 PM Re: Add Domain Admins to local Administrators Group
h00kupz h00kupz Fresh Scripter Registered: 2002-07-17 Posts: 14 Loc: Atlanta	Thanks for the quick reply also!!! _________________________ Select * from users where clue > 0 [b]0 rows affected.[/b]
Top

#31298 - 2002-11-08 10:47 PM Re: Add Domain Admins to local Administrators Group
h00kupz h00kupz Fresh Scripter Registered: 2002-07-17 Posts: 14 Loc: Atlanta	Sorry... I have that thinkgeek Coffee mug sitting on my desk _________________________ Select * from users where clue > 0 [b]0 rows affected.[/b]
Top

#31299 - 2002-11-11 03:54 PM Re: Add Domain Admins to local Administrators Group
Rocco Capra Rocco Capra Hey THIS is FUN Registered: 2002-04-01 Posts: 380 Loc: Mansfield Ohio	Question, the nature of the Domain Admins group is to give the users in that group full rights on all pc's on the domain. Therefore what added benifit is there to add them to the local PC administrators group? Isn't that a double kill? Rocco _________________________ I Love this board!! -------------------- My DEV PC is running KIX 4.22 WINXP Pro
Top

#31300 - 2002-11-11 04:00 PM Re: Add Domain Admins to local Administrators Group
Howard Bullock Howard Bullock KiX Supporter Registered: 2000-09-15 Posts: 5809 Loc: Harrisburg, PA USA	The global group "Domain Admins" is automatically placed in the local Administrators group automatically when a computer joins the domain. This group may not be beneficial when working a "Master Domain" model because the you can not add master domain accounts to the "Domain Admins" group of a resource domain. In this case you would have to add the "MasterDomain\Domain Admins" group to the computers local Administrators group. Also when users get Admin level access to their computer many remove the domain "Domain Admins" global group from the Administrators group. In that case it would have to be added back when the user is removed. _________________________ Home page: http://www.kixhelp.com/hb/
Top

#31301 - 2002-11-11 04:00 PM Re: Add Domain Admins to local Administrators Group
Les Les KiX Master Registered: 2001-06-11 Posts: 12734 Loc: fortfrances.on.ca	Rocco, This is usually the result of giving users admin rights on the box. They turn around and remove Domain Admins just like in the fable of the sorcerer's apprentice. QA, See this thread: Topic: local admin Pretty much the same, only different. After you add yourself back in, you should remove the user. _________________________ Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
Top

#31302 - 2002-11-11 04:15 PM Re: Add Domain Admins to local Administrators Group
Rocco Capra Rocco Capra Hey THIS is FUN Registered: 2002-04-01 Posts: 380 Loc: Mansfield Ohio	Good reason not to give admin rights to local users! I guess since none of our users are admins, no need for worry. right? Thanks, Rocco _________________________ I Love this board!! -------------------- My DEV PC is running KIX 4.22 WINXP Pro
Top

#31303 - 2002-11-11 04:20 PM Re: Add Domain Admins to local Administrators Group
Les Les KiX Master Registered: 2001-06-11 Posts: 12734 Loc: fortfrances.on.ca	Not to confuse LUsers (local users) with DUsers (domain users), but neither should have admin rights. _________________________ Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
Top

#31304 - 2002-11-11 05:29 PM Re: Add Domain Admins to local Administrators Group
Howard Bullock Howard Bullock KiX Supporter Registered: 2000-09-15 Posts: 5809 Loc: Harrisburg, PA USA	quote: LES: Not to confuse LUsers (local users) with DUsers (domain users), but neither should have admin rights Unless its me _________________________ Home page: http://www.kixhelp.com/hb/
Top

Page 1 of 1

1

Previous Topic

Previous Topic View All Topics

View All Topics

Index Next Topic

Next Topic

Moderator: Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart

Hop to:

Shout Box

Who's Online

0 registered and 661 anonymous users online.

Newest Members

Viginette, ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder
17888 Registered Users

Generated in 0.066 seconds in which 0.023 seconds were spent on a total of 12 queries. Zlib compression enabled.

click tracking