Periodically I acquire computers from ex-employees that only have themselves as local Users.
Even though I'm in the Administrators Group as a domain admin, I don't have permission to add anyone to local Users.
I need to clean these up for redeployment and often wind up formatting/reinstalling.
Surely there's a simpler, faster way to achieve this?
Welcome to the forum if you add domain admin to local admin group while on the domain it should work. Your domain is setup wrong DC admins must control local admin or a user can lock you out
Thanks! That's what I thought.
I am a member of the domain admin group that is in the local admin group yet I can't even add myself as an admin or local User.
We've been locked out of ex-employee machines before.
Where do I look in DC for the local admin control setting that's obviously wrong?
I won't have permission to change it, but I can point it out to the people that do.
Quote