I am trying to use the net localgroup command to add an AD group to the local Administrators group on several machines. (I’m creating a .BAT file that can be run easily rather than having to manually add it.) It seems to work with some groups but not others.
For example,
net localgroup “Administrators” “mydomain\Group1” /ADD
works fine, but
net localgroup “Administrators” “mydomain\Group2” /ADD
comes back with the help text about proper syntax and the group is not added.
The only difference between the 2 commands is the name of the group. Are there limitations with the net localgroup command on anything like number of characters in the name of the item to add (the “mydomain\Groupx” part), or any illegal characters in group names (some of the group names have a dash in them), or can it only add Domain Local groups and not Global or Universal groups to a PC’s local groups, or are specific rights required to the group object in AD that we want to add where we may have those rights to some groups but not others? (I am logged into the PC as an ID with Administrator rights on the local PC when trying to run the net localgroup command.)
Thank you!
