Windows Forum

Ask something
Discussion Locked

Centralizing Granting Local Admin Rights

0 helpful
8 replies

by sheesh beesh

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Is their any to centralize granting local Admin Rights without going to each computer (either through the server or physically)?

Basically, is their some way to create a container (either an OU or group) to hold the computers I want to give localadmin rights to, then grant the person or groups Local Admin Rights to all computers in that container?

Thanks for your input.

8 replies

by ewgny

The best way is to make a security group for the purpose of having its members local administrators. Add that group to each PC's local administrators group. (The group can be added before imaging). You can go to Active Directory Users & Computers, right click the computer object and choose manage. You can then add members to the local admininistrators group through Local Users and groups.
You should add the security group you created to the local admins group at this time. In the future you can control local admins by adjusting the membership of the security group

by sheesh beesh

Thank you for your reply. Actually in my question I stated that I was looking for some sort of solution to help me avoid logging in to each individual Computer (either physically or remotely).

by jove

If you setup Active Directory you will be able to acomplish what you want to do.

by sheesh beesh

I am using Active Directory. As Active Directory is quite comprehensive, it would be great if you could elaborate as to where exactly in AD I can accomplish this.

by charlie.agonoy

You may manage any workstation from any remote server/workstation as long are you are the admin or have administrative rights in your domain. You can set Local Rights within the Computer Management MMC.

by sheesh beesh

Thanks for your comments. I mentioned in my question that I wanted some sort of solution that does not require me to log on to the idividual computers (remotely or physically). I was looking for some sort of quick solution where I can put the computers in some container in AD without dealing with the individual computers. It looks like this can not be

This discussion is closed to new replies.