Networks·41,424 discussions

Delegate ability to add computer to domain and full control of workstations

Locked

If there away to give a group of help desk personal full access to workstations and the ability to add computers to the domain? Not sure what the best way to go about this is. Was thinking of createing a helpdesk security group and using the delagation wizard, but I’m not sure how I can have them have full control of the PC with out being able to logon to the servers. Thank you in advanced for any advice!

Topic

Clarifications

In reply to Delegate ability to add computer to domain and full control of workstations

Clarifications

delegate and …

In reply to Delegate ability to add computer to domain and full control of workstations

Delegate the right to add workstations to the domain in AD. To give admin permissions on the PC’s themselves you’ll have to add the Helpdesk group to to local administrators group on the PC(‘s).

Quick way to add group?

In reply to delegate and …

Makes since, but is there a quick way to add a help desk group to the local administrator group without touching each PC? Thank you!

a logon script

In reply to Quick way to add group?

would probably be your best option. If you use AD, you can push the script with a group policy

Use a group policy to assign local admin rights

In reply to a logon script

you can assign users to the local admins group of domain PC’s via Group Policy.

I made a new GPO and named it local admin rights on desktops. In GPO settings goto Computer Config > Windows Settings > Security Settings > Restricted Groups. Add the domain group you want to be added to the local admin group and you’re all set.

Don’t forget to link the GPO to the correct OU / site /domain.

Delegation Wizard

In reply to Delegate ability to add computer to domain and full control of workstations

Another option:

1. Create a Security Group and add the users. Open ADUC. Go to the Domain Level, ex: abc.com. Right-click and delegate control. Add your group and choose – next. Under the list of common tasks, choose: Join a computer to the domain.

2. Create an OU, place any/all computers in the OU that you want managed by the group. Grant the group the admin rights to the objects in that OU.

SMS

In reply to Delegate ability to add computer to domain and full control of workstations

Actually I ended up creating a batch file that deployed sms which added a group named “helpdesk” to the local admin group. Thanks for the help!

I am facing the same problem

In reply to Delegate ability to add computer to domain and full control of workstations

Dear Fellows,
i am also facing the same problem and i want to implement the same case in my Lab. Did any one solve this problem ???

“Delegate ability to add computer to domain and full control of workstations”

plz reply me and thank x in advance

Zafar

[Author]

Replies