Add Domain User To Local Admin Group Gpo

Launch the local users and groups console start run lusrmgr msc on a client pc click the groups folder then open the properties of the group you updated trough group policy preferences.

Add domain user to local admin group gpo. When i look in the local administrator group from the computer management view. Add the ad security group. Add local administrators via gpo group policy so unless you already have delegated privileges you will need domain admin access to enable or create group policies ironically enough. In group policy management console right click on the domain or the ou and select link an existing gpo.

User configuration settings disabled optional click on the scope tab. There is also the option of group policy preferences using the local user and group portion of the preference. When adding groups you can add whatever you want the gpo will match the group on the system if you type admins it will match a local group called admins if it exists and put local admin in that group. Remove authenticated users group.

In the select users computers or groups dialog box do the following. After the policy is applied you can go ahead and check if it worked. Of course apply any new gpo to a test group of pcs before doing them all. To add a user account or group account to this group under enter the object names to select type the name of the user account or group account that you want.

This allows you to grant local admin privileges on domain computers to technical support staff helpdesk team specific users or other privileged accounts. This does not get applied to users only computers. Here are the steps to add local administrators via gpo. In the this group is a member of field put in administrators.

Open group policy management editor gpmc. As long as you add it to the member of it will not remove other local groups. The domain users and or groups should be member s of this local group. Add the new policy to the ou containing your computers.

Right click the group to which you want to add a member click add to group and then click add. You can use gpo group policy to add active directory users and groups to the local administrators group on domain joined servers and workstations.