Archive for June, 2017

Add a Domain User to the Local Administrators Group

June 21st, 2017 by and tagged , ,

When building out a workstation for an AD Domain user, in some environments the user is added to the local Administrators group to allow the user to install and configure applications. Now there are some of us who think that’s a Bad Idea and a Security Risk, but the reality is that it’s policy in […]

Posted in Active Directory, IT Admin, PowerShell | Comments Off on Add a Domain User to the Local Administrators Group

Copying AD User Group Permissions with PowerShell

June 6th, 2017 by and tagged , , ,

One of the tasks that I’m often asked to perform as an Active Directory domain administrator is to assign a user the same set of permissions as an existing user. This is something you can do fairly easily in the GUI (Active Directory Users and Computers, dsa.msc) when you’re first creating the user, but which […]

Posted in Active Directory, IT Admin, PowerShell, Security | Comments Off on Copying AD User Group Permissions with PowerShell