how do i add domain users as local admins?
In environments where you must have local admin access (yes, this is far from ideal but we can get to that later) its not a good idea to add domin users to local admins unless you like you users to have admin rights over each others machines. this can be especially fun in a school / college environment!
a better way to manage this is to have the logged in user on the machine (aka interactive account) become a local admin for its logged in tenure.
the command to do so is (from a dos prompt or batch file):
net localgroup Administrators interactive /add
once again, its far better to avoid local admin access, but if you have to use it, this is the best way i have found to manage it
No comments:
Post a Comment