Americas

  • United States

Tips for setting up Windows domain accounts

Opinion
Mar 27, 20062 mins
Enterprise Applications

Grant local admin privileges to domain account by adding it to the administrators group on the local machine.

I am running a network of hundreds of computers with Windows XP Pro clients and Windows 2000 Server for a domain. Is there a way to log on using an admin account be able to install the software?

I am running a network of hundreds of computers with Windows XP Pro clients and Windows 2000 Server for a domain. I would like to set up a network administrator account to be able to install software on local client machines. Is there a way to do this so that I can just log on using an admin account I create on the domain and be able to install the software?

You can grant local administrator privileges to a domain account by adding that domain account to the administrators group on the local machine. Creating a group in the domain containing the domain accounts that are allowed to administer machines, and adding that domain group name to the local administrators group on each machine, let you change the local administrators group on every machine simply by updating the one domain-security group entry. You will need to install the Adminpak.MSI package, available on your server CD or from Microsoft, on your workstation if you have not already done so. Use the Active Directory Users and Computers application found under Administrative Tools in the control panel to create a new universal security group and add your trusted-administrator accounts to the group. Add this group to the local admin group on machines as you roll them out or as you perform maintenance. Once the local admin group contains the domain admin group, domain admins can perform local administrative tasks.