how to add Domain users to local admin group

[sureshr]

Hi all ;) here is the senario

Nt4 domain called test

user has a nt2000 machine with a workgroup test. I want to make the
domain/username an account on his local machine, but nt2000 wont let me do
it. :(

I do this on nt4 , ie giving everyone doman/user admin right to their local
machine.

any help would be great.. I was looking at usergroup.vbs but , once deployed
and the use is logged on we cant add to the local/administrator group anyway
;(..

thx suresh

[Amiri Jones]

I believe that in order to add domain accounts to a local group, the
machine must be a member of that domain. Add the machine to the domain and
see if you can add the names after that.

sureshr <sur...@raima.com> wrote in message
news:eQc0IPcn$GA.253@cppssbbsa03...

[sureshr]

Maybe i should restate my problem :)

Automated install of nt2000 using sysprep. I have the machine joining the
domain, I could like to have the user who logs in be in the nt2000 machines
local/admin group(on their own machine ie, the 2000 machine that they just
recieved). The problem rightn now is i have to log in as administrator and
then add the user to the local/admin group.. Could this happen automatically
....thx suresh
ps I usually make all users admins of their own machine, and this would help
me role the 2000 machine out without touching it at all. thx
..

"Amiri Jones" <MyFirstName...@pseg.com> wrote in message
news:eDHne8kn$GA....@cppssbbsa02.microsoft.com...

[Darwin Sanoy]

Here's how I'm doing it:

1) During sysprep add the local user "NT AUTHORITY\Authenticated Users" to
the "<workstation>\administrators" group. This gives everyone who logs on
administrator rights.
2) In the guirunonce section of sysprep.inf, execute a batch file that adds
the current user to administrators and removes the above account with net
use commands. Here is the batch file contents:

net localgroup administrators "%userdomain%\%username%" /add
net localgroup administrators "corp\SYS_WSADMIN" /add
net localgroup administrators "NT Authority\Authenticated Users" /delete

I have this batch file copied to \winnt directory and call it from
guirunonce (not cmdlines.txt).
I tried a vbs script with the help of several others - and even when logging
on with alternate credentials - I could not get the VBS approach to work.

Fyi,
D.

http://www.desktopengineer.com/

"sureshr" <sur...@raima.com> wrote in message

news:uyyQ$9nn$GA.165@cppssbbsa03...

> Maybe i should restate my problem :)
>
> Automated install of nt2000 using sysprep. I have the machine joining the
> domain, I could like to have the user who logs in be in the nt2000
machines
> local/admin group(on their own machine ie, the 2000 machine that they just
> recieved). The problem rightn now is i have to log in as administrator and
> then add the user to the local/admin group.. Could this happen
automatically
> ...thx suresh
> ps I usually make all users admins of their own machine, and this would
help
> me role the 2000 machine out without touching it at all. thx
> .
>

[Chipster]

The Net Localgroup works when not connected to the domain. It doesn't
verify the groups or authentication when adding so make sure the names
are correct. :)

The easiest approach IMHO, is to use group policies to add the domain
users to the admin group on the local machines in that GPO.

Personally, I'm against the user having access to the machine. It
defeats the purpose of NT security. :)

On Tue, 30 May 2000 12:04:27 -0400, "Darwin Sanoy" <Dar...@sanoy.com>
wrote: