Hi
You can add the domain user in local administrators group. You don't need to create a local for that.
Please don't forget to mark helpful reply as answer
Create a local Admin user from AD with power shell script
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(16, 43%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EP1%3C/text%3E%3C/svg%3E)
PerserPolis-1732
1,951
Reputation points
Hi,
I want to create a local Admin user on the client machine from existing AD user. For example the AD user is called "smustermann" but the local admin user on the client machine should be called "smustermannChief"
The password should be the same password as Windows domain user password.
Can I do that with a power shell script?
Regards
Windows for business | Windows Server | User experience | PowerShell
Windows for business | Windows Server | User experience | Other
13 answers
Sort by: Oldest
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 80%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETB%3C/text%3E%3C/svg%3E)
Thameur-BOURBITA 36,536 Reputation points Moderator2022-03-16T17:32:31.757+00:00 -
PerserPolis-1732 1,951 Reputation points
2022-03-17T06:54:31.687+00:00 Hi,
I know that, I can add it on the client machine and I can add it with GPO. But my question was different. The domain ad user is called "smustermann" and I want that the local admin user should be called from
domain ad user "smustermannChief". And the local admin user "smustermannChief" should be come from AD.Regards
Sign in to comment -
-
Andreas Baumgarten 133K Reputation points MVP Volunteer Moderator2022-03-16T18:11:27.81+00:00 Hi @PerserPolis-1732 ,
in addition to Thameur-BOURBITA: It's not possible to "read" the password of a domain user to use it in a script to create a local user.
In my opinion it doesn't make sense anyway because there will be no sync if the domain user password is changed.----------
(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)
Regards
Andreas Baumgarten -
PerserPolis-1732 1,951 Reputation points
2022-03-17T06:52:00.5+00:00 Hi Andreas, Thameur,
I know how I can add a domain user in local Administrator. I can do that with GPO. But as I mention the domain is called "smustermann" and I want to have so that the local admin should be called from "smustermann" but "smustermannChief". What I mean with password I do not want to import the password.
The domain ad user is called "smustermann" and is created on AD. The local admin user should be called on the client machine "smustermannChief" and it should be come from AD based of "smustermann". Is that possible?
Regards
-
Andreas Baumgarten 133K Reputation points MVP Volunteer Moderator
2022-03-17T07:03:01.657+00:00 Hi @PerserPolis-1732 ,
do you have some kind of "mapping/reference table" which user is mapped/related to which computer?
I think this is required because how you know which local user should be created on which computer?----------
(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)
Regards
Andreas Baumgarten -
PerserPolis-1732 1,951 Reputation points
2022-03-17T07:21:57.683+00:00 Hi,
I know what you mean. I have a domain group with domain user or I have a CSV file. The computer are all in domain. I have a OU named "CO" with all computers from the Department "CO" and the same OU "CO" which are all the ad users from that Department "CO"
For example
The user "smustermann" has the computer (is called srv02)
Regards