GPO – make a domain user local administrator of a computer

In this tutorial, I’ll show you how to make a domain user local administrator of a computer or server using Group Policy (GPO). In a previous tutorial, I explain how to do this using restricted groups, which involved creating an Active Directory group, putting the user in that group and then using the group policy, …

Read more



LAPS – Securing Local Administrator Accounts

Wizard install

LAPS (Local Administrator Password Solution) is a free solution provided by Microsoft that allows the security of workstations. LAPS allows for each computer in OR to randomly generate a password for the local Administrator account and store it in an Active Directory attribute (ms-Mcs-AdmPwd). It ‘relies on the SID of the account which is structured …

Read more