baztech Posted November 1, 2014 Posted November 1, 2014 Hi, I am in charge of our schools one-one laptop program (about 150 laptops). I'm not really a sysadmin, just a teacher that fell in to the role! My scenario: I have created a Win 8 image with WDT and successfully edited/deployed it a few times. I feel confident with that now. I would like our one-one student owned laptops to be joined to the domain for easy updating/printing/file shares but would also like the students to be able to install their own apps. How can I easily automate each students AD account to also be a local admin account on their individually owned laptop? At the moment I am currently: right click on computer go to manage then expand the system tools tab, then go to users and groups, on selecting groups go to the administrators group right click on it and go to properties go to add and type in the domain user you need to add.... which is tedious. New here - very much appreciate any help! Thanks!
DarrenM Posted November 1, 2014 Posted November 1, 2014 Welcome! What will be the logical link between laptop and pupil? if the laptop computer name was the same as the students username then you could write a script to add any user with the same name as the computer to be an admin on the computer.
edutech4schools Posted November 1, 2014 Posted November 1, 2014 You can use a GPO called restricted groups to do this but i am not in front of a computer at the moment so can't give step by step.
xenonive Posted November 1, 2014 Posted November 1, 2014 Would also be better to add them all to a group then apply the group to all the laptops to save assigning one user per laptop unless you require only one local admin as assume other students won't be logging on to anything but their own laptop
baztech Posted November 1, 2014 Author Posted November 1, 2014 Welcome! What will be the logical link between laptop and pupil? if the laptop computer name was the same as the students username then you could write a script to add any user with the same name as the computer to be an admin on the computer. The laptop can have the same name as the student's username. Ideally it'd be prefaced with BYOD-username but that isn't essential. If you could provide some guidance or a link to how I could achieve this script it would really appreciated. Thanks Darren! You can use a GPO called restricted groups to do this but i am not in front of a computer at the moment so can't give step by step. Fantastic! Would also be better to add them all to a group then apply the group to all the laptops to save assigning one user per laptop unless you require only one local admin as assume other students won't be logging on to anything but their own laptop Do you mean like this? How to Make a Domain User the Local Administrator for all PCs - TechNet Articles - United States (English) - TechNet Wiki That should be fine too. Does it only create the account when the student first logs in? Also, can I restrict it to a certain computer OU? i.e. I only want them to be localadmins of the group 'BYOD Computers' and not 'Circulation' or similar. Thank you for all the help! You're all awesome.
xenonive Posted November 1, 2014 Posted November 1, 2014 Yes that is the exact you need then you only apply the GPO to the BYOD OU
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now