Adding your Desktop Admin Groups to One Global Group for Administrators

One idea that has come up and is really handy, is creating a general support user so that you can login to machines and have Administrative rights to that machine. We have many groups, and each group has a Desktop Admin group that we add people to who need Administrative access. But we also use it to remove people that seem to abuse it.

Instead of manually adding the groups one by one, you can use dsquery and dsmod. You simple do a query to find the groups that you’ve created. In this example we’re looking for anything that ends in “Desktop Admin”:

dsquery group domainroot -name “*Desktop Admin”

Which returns all of the groups we need. Next step is to take the Global Desktop Admin group and add it to all of these groups. This is simple with dsmod:

dsquery group domainroot -name “*Desktop Admin” | dsmod group -addmbr “CN=Global Desktop Admin,OU=Network Admin,OU=Groups,DC=DOMAIN,DC=LAN”

Voila! Done.


Did you like this article?


0 Shares:
You May Also Like

Run Windows Applications within Ubuntu

I ran into this article about how you can seamlessly run Windows Applications from within Ubunutu. The author is using VMware, rdesktop (apt-get install rdesktop), and Seamless RDP. http://hehe2.net/thedarkside/microsoft/run-windows-apps-100-seamlessly-on-ubuntu/
Read More

Setting up daily, weekly and monthly MySQL Database Backups using AutoMySQLBackup

AutoMySQLBackup is a shell script that allows daily, weekly and monthly backups of your local and remote MySQL Databases. It's meant to run on Linux/Unix through a cron job. Its highly configurable, and easy to setup as I will show you today! First you will need to acquire the shell script and drop it on your server. You can download AutoMySQLBackup on their SourceForge Project Page
Read More