up vote 0 down vote favorite
share [g+] share [fb]

I have found similar questions but not one that's exactly what i'm looking for. Hoping someone can give me a hand as i'm not very familiar with Powershell. We have a group of computers. In the past we've run into issues where we need a remote user to be able to logon as administrator, but we don't want to give them our actual admin account credentials for obvious reasons. Going forth we can add a new admin user on the laptops so it's availble, but for the ones already out there, is there a quick powershell command i can run from my desk, against a hostfilelist maybe, that will connect to each machine and add a new local user named "remoteadmin" and set it as an administrator? This would be very handy in the future so they would have a way to logon (once we gave them the pwd) but we'd still be protecting the rest of our systems here at the office. Thanks!

link|improve this question
64% accept rate
This is not protection. Giving them one admin account they can delete/modify/add other admin users. And mess with the system. So you can give them the one admin password to have the same effect. – mailq Sep 6 '11 at 16:40
Is the username to be added always the same? If so, then you should be able to with a group policy preference, which I think would be easier. – Zoredache Sep 6 '11 at 16:40
Ideally they'd never have admin access, I agree! We wouldn't want this on all machines, just the laptops that are out in the field, so i'd not want to do a gpo per se because we're a small shop and don't have the gpos broken down that close. We have laptops and desktops OUs, but not inside/outside laptops as many of our internals have laptops. This would not be something used very often, and if they did have it could only get on remote laptops, just a safety net in case it's needed. We had an issue recently where it was necessary for them to bring their machine in to get adjusted, when – Don Sep 6 '11 at 16:48
they could have logged in as admin to fix the problem, but we weren't up for giving out the admin credentials obviously because then they'd have the local machine pwd for all systems on the domain. Just having one for them just in case could be handy... – Don Sep 6 '11 at 16:49
So you want one account for each laptop but with different passwords? – mailq Sep 6 '11 at 17:01
show 3 more comments
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown
discard

Browse other questions tagged or ask your own question.