Windows Forum

Ask something
Discussion Locked

Active Directory Dilemma

0 helpful
3 replies

by timmitchell

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hey folks, help me out here. I've been tasked with 2 issues and I'm stumped.

I've got to add a global group (support personnel) to the local administrators group on 4000 Windows 2000 client machines. I have no interest in doing this manually on each one of the 4000 machines, and I know there's a way to automate this.

Also, I would like to change the local administrator password on all those same machines. I've found that AD will allow changing the local administrator account name, but nothing about remotely changing the password for that account.

I don't have SMS, so I'll have to use AD's native features to complete these tasks. I'm sure that I can configure a GPO to accomplish this, but I can't find it anywhere. Any suggestions?

thanks.....

3 replies

by erikdr

There's a quick and VERY dirty way:
Make a snapshot of the local changes which are done for these two things. WinInstall LE, bundled on CD 1 of the AS Server set, allows this. The resulting MSI can be assigned to an OU with all 4000 computers in it, and upon startup the GPO will execute.

However snapshotting can be a bit too dirty sometimes, hope that others will find a cleaner solution for you...

- The Netherlands

This discussion is closed to new replies.