Adding Domain Users to local Admin

well there is a very small, minor issue. The local machine accounts, which the local administrators account is a part of, are local to the machine, not the domain. Therefore the local administrators account for the machine is not recongnized by the domain as it doesnt exist within the domain.

well Total Geek I suggest you think this one through. you can reject a suggestion but think before your leap or you'll appear not Total Geek.

Theres 2 ways to log on. The machine [locally], the one your sitting in front of and you choose the machine name from the log on drop down list or the domain and you choose the domain from the drop down list. the 2 accounts are different. Group Policy might make the the local admin accounts name the same as the domain admin account but the passwords can be different and should be different so if someone figures out the local machine admin accounts password, it won't get them into the domain.

Assuming the workstations have been added to the domain...

I will show you how to do it without ever touching the client computer.

1. From the domain server oe any machine that has the admin tools installed and domain admin rights open Active Directory Users and computers.

2. Open up the Computers folder in your active directory structure. You will see a list of all your computers that haqve been added to the domain.

3. Right click on the computer that you want to modify security for and select manage.

3. In the Computer Management Window expand Local Users and Groups.

5. Click on Groups.

6. Open up administrators. This is the local administrators group on the machine you are connected to.

7. Click on Add.

8. Make sure that location is set to your domain name or All Locations.

9. Find Domain Users in the list and add it to the local Administrators Group.

It's that easy.

If you do not see the computer in question listed in the computers section of Active Directory Users and computers the machine has not been added to the domain. To add the computer to the domain go log into it locally as the local admin. Right click on My Computer and select Properties. Go to the computer name tab. Click on the change button, select domain and enter the domain name. You will be promted to provide Domain credentials to add the computer. Use the domain admin ID and password.

On the client machine go to a command prompt
type "net localgroup Administrators your_domain\User_name /add"
use your domain and user info.

This question was closed by the author