Grant administrator permissions to local user without adding to administrators group

Mostafa-sayed

5/7/23, 7:10 PM

I need to grant administrator permissions to a local user without being member of the administrators group. This on windows server 2019

0 + 0

windows

Score:3

Server

Dylan Cook

5/7/23, 7:31 PM

What you're asking is impossible. Windows server and client builds operate with very well defined permission sets based on local groups. There are certain things you can work around without having full administrator rights, such as granting NTFS permissions to allow users to write in places that generally require administrator rights; but the ability to do things like installing applications and passing UAC prompts are going to require access to an elevated account.

You can either create a service account and place that in administrators using it where necessary; or have a user with administrator privileges do an action on the user's behalf. If this is a domain connected server then you should be using group policy or other tools to manage your local administrators group and avoid putting user accounts directly in it, use groups where possible for scalability.

0 + 0

djdomi

5/7/23, 7:58 PM

not completely, it Exists a way that granta temporary administration right, but its a but hard to configure. i dont have my book here where it was written but its describe in the older MCSA books

Dylan Cook

5/7/23, 8:07 PM

There's no built in expiration controls, you could script out adding / removing a user from the administrators group, sure; but that doesn't answer the original question of having admin rights without group membership.

djdomi

5/7/23, 8:10 PM

well having it temporarily is possible, add the user to the administrator group, login and remove it ;) as long as its been logged on it provides tge administrator access to the devices

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Grant administrator permissions to local user without adding to administrators group

TH: ให้สิทธิ์ผู้ดูแลระบบแก่ผู้ใช้ภายในโดยไม่ต้องเพิ่มในกลุ่มผู้ดูแลระบบ

RO: Acordați permisiuni de administrator utilizatorului local fără a adăuga la grupul de administratori

RU: Предоставить права администратора локальному пользователю без добавления в группу администраторов

VI: Grant administrator permissions to local user without adding to administrators group

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.