Add Local Admins Using Group Policy (GPO)

In this video we cover the steps to Add Local Admins Using Group Policy (GPO). I show you exactly which settings need to get applied, how to create and link a group policy to an OU. Finally we go over verifying that the GPO did get applied successfully.

#PowershellBooks :

#SCCMBooks :

#Equipment :

[TmanaokLine]

What a phenomenal video, even 5 years later it's helped me out. In my case, I ended up linking the policy to a security group to which the computer was applied to. Helped me out when installing complex software requiring service accounts to be local admins (but who's accounts I wanted to manage in AD).

[rommeljjimenez]

Paul, Great content, your work is professional, clean to the point and remarkable, your videos are instructive and you show that what you are doing works... not those half ass channel that they just show you a few things and you do not even know it what they are doing / showing even work or they made a bunch of mistakes and you end up troubleshooting with them. My hat goes of to you. Congratulations Great channel, great content.

[bounseysinnavong]

Hi thanks a lot of this tutorial, it's very helpful

[krangath]

Thanks mate, great video, especially noting what not to do at the "Restricted Groups" section.

[timn]

Hi Paul,   your video saved me a lot of time and effort and do greatly appreciate all your videos.  I followed step by step and confirmed the gpo was being pushed gpresult /r. But when group members login and to execute a "run as administrator" command" they're getting "This program is
blocked by group policy" and I can't figure out why- we don't have app policy or anything that would blocking these users and not sure why this is happening. Your thoughts ?

[TruthSeeker]

Hi Thank you for the video, but how do I create a local admin user account on every client computer of my domain through GPO ?

[chusujg]

request: i need the policy to actually create the user as a local user named "LEET" and to add the to the admin group on the actual computer. any advice?

[myspedo]

Thank you for the lovely tutorial as this helped me understand why my members disappeared and also, I had to redo my Lab environment because I couldn't use Hyper-V Enhanced Session

[sephierot]

hi, I'm using windows srv 2019, and i created a gpo that disable/change passwoed local accounts(Administrator / Guess) but i cannot change the password its gray out, in group policy. can you give some advice

[DevendraSrikakulam]

Hi Paul, We Need to give admin privileges to prefetch and temp folder for particular domain users. Is it possible can you please help me.

[Yatana]

is there a way yoou can push creation of local admins on the computers itself? not as a domain user but like the windows local admins.

[Evgeny.Sokolsky]

Hello, i have a question please.
Can i login to some computer that recieve the policy like local admin? computer_name\djones - for example?
Thank you, and best regards!

[blakenorthrup]

Don't you have to select delegation, and only add the selected group to filtering?

[kibade]

Nice, but it didn't create a "local" admin account .\<user>

[iseskaz]

I don't want my users to control my servers. Bad idea.

[khmertechtips]

Not correct bro it's still Administrator on both Server and Client. I just want to add permission to that user only client user. When you remote to the server this user is full control on the server.

[sanjeevkumar-tosl]

I think you are making us fool dear

How can you apply a policy on a user which is defined for computer