I have a user in AD that is a "client push" user. I need this user to be added to the local admins of each client pc. Can this be pushed through AD?
Find or create a policy at the root of the OU of the computers you want them added to, go to computer configuration > preferences > control panel settings > local users and groups
The right click > new > local group and select that action as "update" and in group name select "Administrators (Built in)" and just add the user(s) to the members section at the bottom.
Should do the trick....hopefully
![]()
Ahh, cool, thanks. I was "Adding". Oddly though, I don't have "Administrators (Built in)" when I look in AD groups. Will I have to create that first in AD?