How can I be an administrator on servers that are members of a domain but do not belong to the group (Domain Admins, Enterprise Admins, Schema Admins, and Built-In Administrators)?

Anonymous
2024-01-24T09:03:07+00:00

I want to be able to be an administrator of the domain computers without belonging to those groups because if I belong to those groups I would have to enable smartcard.

Is there a group that my user can belong to as a local administrator in the whole domain? or

how can i set from the domain a user as local administrator in the whole domain?because I could do it one by one.

Thanks

Windows for business | Windows Server | Directory services | Active Directory

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments No comments
{count} votes
Accepted answer
  1. Anonymous
    2024-01-25T02:27:41+00:00

    Hello Albertosd77,

    Thank you for posting in Microsoft Community forum.

    You can user GPO Preferences.
    1.Create one GPO and link it to domain.
    2.Create one domain group and put all the domain computers except Domain Controllers to this group (such as group1).
    3.Click the new GPO you created just now and add group1 under "Security Filtering".
    Make Authenticated users have "Read" permission.

    Make computer group have "Read" and "Apply group policy" permissions.

    4.Edit this GPO and go to the following GPO section: Computer Configuration –> Preferences –> Control Panel Settings –> Local Users and Groups;

    5.Add a new rule ( New -> Local Group );

    6.Select Update in the Action field (it is an important option!);

    7.Select Administrators (Built-in) in the Group Name dropdown list.
    8.Click Add button.
    9.In Local Group Member windows:
    Name: select the domain user you want.
    Action: Add to this group

    10.Run gpupdate /force or restart the domain computers and check if the domain user is in local Administrators.

    I hope the information above is helpful.

    If you have any question or concern, please feel free to let us know.

    Best Regards,
    Daisy Zhou

    1 person found this answer helpful.
    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Anonymous
    2024-01-25T08:20:09+00:00

    Thank you very much for your help Daisy

    0 comments No comments