I need to add a domain user in the local administrator group remotly and I have to the local admin password
psexec will do it remotely combined with 'net localgroup' command.
from command line:
psexec \\remotename -u username -p pwd net localgroup Administrators "domain\user" /add
you can also then batch that or use some scripting to apply to a group of machines. or you could always use powershell.
Another option - you can open up Local Users and Groups for the remote computer using this command:
You can add a user to a group remotely by using the Group Policy Management Console. I would do the following:
If you're looking for a one-off method, you can also open the remote computer in Computer Management, click on Local Users and Groups -> Groups -> Administrators. Then add the domain group there.
This is really only practical for a few workstations. Otherwise Group Policy (the method Tom mentioned, or using Group Policy Preferences) is preferred.
You can also do it by "simply" using groups.
Create a domain group local_admin , then make it a member of the computers local administrators group.
Then its a simple matter of making the domain user account a member of the domain local_admin group
Since we use pre-configured templates for our company installations we already have this configured before a user ever gets his PC. Giving us a simple way to give a specific user or group local administrative privileges on all our computers domain computers