[spepi]

I am creating a new domain, phasing out my NT4 Dinosaur. I have to actually touch every desktop and add them to the new domain, but I need to give the users local admin for a temporary time, so I can be logged on as them and copy thier misc data to the new profile. How can this be done? I looked around on the group, but wasnt able to come up with the exact solution.

Thanks in advance.
spepi

[RobW]

net localgroup administrators DOMAIN\username /add

[m80arm]

Spepi,

You want to look into restricted groups:

Here is a few good links:

http://www.windowsecurity.com/articl...ed-Groups.html

http://www.microsoft.com/resources/d....mspx?mfr=true

Hope this helps

Michael

[spepi]

Originally Posted by RobW

net localgroup administrators DOMAIN\username /add

Can I do this for the domain users group? If so, where do I run this? On the actual PC or is this done on the Domain controller...

[RobW]

You mentioned that you had to 'touch' each PC. Do this at each PC from a command prompt when logged on as administrator. After the command completes, log on as the user.

[m80arm]

Originally Posted by RobW

You mentioned that you had to 'touch' each PC. Do this at each PC from a command prompt when logged on as administrator. After the command completes, log on as the user.

You could also script this with PSEXEC (http://www.microsoft.com/technet/sys...es/psexec.mspx) to connect to all machines in a list (Exported from Active Directory) and run this command on all machines without having to visit each one.

Michael

[spepi]

Originally Posted by RobW

You mentioned that you had to 'touch' each PC. Do this at each PC from a command prompt when logged on as administrator. After the command completes, log on as the user.

That works out great, as I have to join the domain anyway, so doing this, I can just execute a batch file for the user I am working with....

I have time to create the mini batch jobs now, because I have some help that might get lost doing this each time, so if I write a script for them to follow, they can execute step by step and run the batch file.

thanks