Windows 10 creating local administrator accounts from Group Policy

[talksr]

Hi there,

I have a small school I look after requesting admin password details for their ICT suite systems.

I would not normally give these out but on account of the lack of money they have and such small support contract they have, I was wondering if I could create them a local admin account via group policy?

 

We are running Server 2016 if that helps?

 

Thanks in advance.

[3s-gtech]

Giving these out will have an ironic effect - I guarantee that it'll end up costing them more in support when they stuff something up! You can use the net user command to do this via GP, run as a startup script. It can create your user, set the password, etc. Then use net localgroup Administrators UserLoginName /add to add that account to the administrators group on that machine. Be prepared for the toolbars, malware, unlicensed software and extreme numbers of ripped Youtube videos.

[mrwoberts]

If they want it to be able to install software, could you show them a better way? (PDQ Deploy??)

You can always setup some automation to update the installers for them, then they just have to {click}...and off it goes.

Little Knowledge and Much Power are not best friends. In fact, they really don't like each other.

[dezt]

It is possible to create a local admin account through Computer Configuration under Group Policy Preferences, then Control Panel Settings, then Local Users and Groups. However, I have had to pick up a school where a support company had done this and it caused chaos. I would not recommend this though as giving teaching staff admin rights can cause issues.