The following fragment in the machine startup script adds 3 domain groups to the local admins group; we then just add users to the domain groups and they will then be local admins as needed.
It's a bit kludged - it ought to check for membership first rather than just try and add... Steve sDomain="domainname" Set oNet=createobject("wscript.network") sComputer=oNet.computername sLocalGroup="administrators" Set oComputer = GetObject("WinNT://" & sComputer) Set oLocalGroup = oComputer.GetObject("Group", sLocalGroup) On error resume next oLocalGroup.Add ("WinNT://" & sDomain & "/" & "informationguidance") oLocalGroup.Add ("WinNT://" & sDomain & "/" & "workexp") oLocalGroup.Add ("WinNT://" & sDomain & "/" & "SAS") On error goto 0 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Oluwaseyi Owoeye Sent: 13 December 2004 10:19 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Making a user a Domain Administrator I have a domain with over 1000 computers and can't possibly go round the machines doing this. DO you have a sample script that can achieve this? List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/