This how to will walk you through using Restricted groups to put users in the local admin group on all PCs. It will also add them to the Remote Desktop user’s group. The usefulness in
In Active Directory, the default container for user objects is the Users container and the default container for computer objects is the Computers container.
AD Delegation allows you to give users/groups access to certain parts of your AD without giving them full admin access. A great example is allowing Help Desk users to reset user passwords; this is actually
Remove user account from local Administrators group : The following powershell commands remove the given AD user account from local Admins group. $user = “DomainName/user1”; $group = “Administrators”; $groupObj =[ADSI]”WinNT://./$group,group” $userObj = [ADSI]”WinNT://$user,user” $groupObj.Remove($userObj.Path) If
Add a user account to the local Administrators group : The following powershell commands add the given user account to local Admin group. $user = “ComputerName/user1”; $group = “Administrators”; $groupObj =[ADSI]”WinNT://./$group,group” $userObj = [ADSI]”WinNT://$user,user” $groupObj.Add($userObj.Path)