Ask the Expert

Local administrative rights to all computers in organizational unit

I need an easy way to give someone local administrative rights to all of the computers within an organizational unit. What are my options (with as many specific details regarding the steps as possible)?

    Requires Free Membership to View

The best way to provide local administrator access is to add the users to the local administrators account on the workstations. One way to do this in a fairly automated fashion would be:
  1. Create a Domain Global Group that represents the administrators for the OU
  2. Create a logon script that checks and adds the administrators for the OU to the local administrators group of the workstation (this will require that the local users are administrators or the use of an account that has administrative access already like someone in Domain Admins)
  3. Create a group policy that assigns this specific logon script and assign it to the OU
  4. To provide particular people administrative access to the machines in the OU you only need to add them to the group you created in step one.
If you have multiple OU's that you want to perform this action for and as well corresponding sets of administrators, you will end up with multiple groups, logon scripts and group policies. A little more effort and you could likely incorporate all of the changes into a single logon script.

Paul

Additional Expert Help:
Be sure to check our Answer FAQ for more expert advice.
For faster answers, visit ITKnowledge Exchange.

This was first published in December 2004

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: