script for local group assignments?

Is there a logon/startup script I can run that will assign permissons to
groups on a local pc? Meaning having domain users = powerusers, IT
department = administrators, etc??

Instead of going to all the pcs and setting this up manually.

Richard
Fri Sep 07 13:34:33 PDT 2007


"UWRFREPORTER04" <UWRFREPORTER04@discussions.microsoft.com> wrote in message
news:CDDDD34A-8C45-462B-9BD0-6C0A373354B5@microsoft.com...
> Is there a logon/startup script I can run that will assign permissons to
> groups on a local pc? Meaning having domain users = powerusers, IT
> department = administrators, etc??
>
> Instead of going to all the pcs and setting this up manually.

Logon scripts run with the credentials and permissions of the user. Users
cannot add themselves to such groups. Best to create domain groups and add
these domain groups to the local Administrators and Power Users groups. This
can be done remotely if you are member of "Domain Admins" (by default
"Domain Admins" is added to the local Administrators group when the computer
is joined to the domain). You can also use Restricted Groups in GPO, which
is designd for this purpose.

--
Richard Mueller
Microsoft MVP Scripting and ADSI
Hilltop Lab - http://www.rlmueller.net
--

K
Thu Sep 20 11:48:01 PDT 2007

Yes. I use Microsoft's (Sysinternals) PsExec program to execute the "net
localgroup" command on remote computers.

ie.
psexec \\comp_name -s net localgroup "Power Users" "domainname\user_name" /add


"UWRFREPORTER04" wrote:

> Is there a logon/startup script I can run that will assign permissons to
> groups on a local pc? Meaning having domain users = powerusers, IT
> department = administrators, etc??
>
> Instead of going to all the pcs and setting this up manually.