Need to Add Local User Account to Loc Administrators Group via GPO

Question

Hello Team,

I have 200 client PC & all client have local accounts (Local account have different name - like xyx - abc-qwe) which do not have local Administrators group membership. I want to add allow these local account to Local Administrators member via GPO. I have already configured below GPO.

Kindly Let me know step to steps process to achieve that goal.

1 -

Answer 1

Hello

Thank you for your question and reaching out. I can understand you are having query related to Add Local User Account to Loc Administrators Group via GPO

Please check under Computer Config - policies - Windows settings - Security Settings - Restricted Groups

You can add whatever accounts you want to the BUILTIN\Administrators group. Just know this GPO will also remove anyone not on the list

You can put also below command and put it into a .bat file and push it through Logon/Startup Script GPO.
net localgroup administrators USERNAME /add

--------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--