I believe in Hyper-V!

Add specific domain account to Local Administrators Group using GPO (SCCM 2012)

Before installing System Center 2012 Configuration Manager you need to create several domain accounts that will be used during installation and configuration of System Center 2012 Configuration Manager. The one of these is the Agent/ClientInstall installation account.
Agent/ClientInstall, a domain user account used when installing the Configuration Manager Client for client push. This user must be a local administrator on all domain computers you want to install the Configuration Manager Client.

For those who don’t know how to add domain account to Local Administrators Group using Group Policy this is a short guide.

Advice: Create a separate Security Group in Active Directory Users and Computers and add Agent/ClientInstall account as a member of that group.

On the domain controller open Group Policy Management console, add to Default Domain Policy, click on Edit.

When Group Policy Management Editor appears go to Computer Configuration –> Policies –> Windows Settings –> Security Settings –> Restricted Groups.On the Restricted Group right click and click on Add Group, browse to the your earlier created Security Group and add to the Restricted Group.

When you added group you have two different choices of what you want to do with the group you selected. Either you use “Members of this group” or “This group is a member of”. The differences of these two choices I’ll explain in two steps.

1. Step “Members of this group”

This is the choice you make when you want to add users to a group. What you select here is what you will see on your computers affected my this policy. If you want to add a user to the local administrators group on the computers then do not forget to add administrator also or the administrator account will be remove from the local administrators group on the domain computers.

2. Step “This group is a member of”

This options you can use if you want to add your selected group into another group. This is not something that will override any other configuration you have done. If you in first choice selected “G Ekobit SystemCenter agent” and with this option select that it will be added to the “Administrators” group any other user you might have added to the group won’t be overwritten by this choice.

After you are finished with your choice close GPO editor, open command prompt and type gpupdate /force on your domain controller and on the computers side.

Check you newly created settings on computers/servers side. Open Manage –> Local Users and Groups –> Groups –> Administrators.

Now we are ready to install Configuration Manager agent on our domain computers/servers. But… before that we need properly to install/configure System Center 2012 Configuration Manager Winking smile. How to do this, I’ll explain in one of my next posts.

Until then, enjoy Smile

17 Responses to “Add specific domain account to Local Administrators Group using GPO (SCCM 2012)

  1. Don’t forget to check option password never expires for account you are using to deploy SCCM agent

  2. Mike

    I appreciate, result in I found exactly what I used to be looking for. You have ended my four day lengthy hunt! Have a great day. Bye

  3. Rajakanth

    Want to be administrator group

  4. Rajakanth

    Want to be administrator groups

  5. Hi, just wanted to tell you, I enjoyed this article.

    It was helpful. Keep on posting!

  6. Hey! This is my first visit to your blog! We are a group of volunteers and starting a new initiative in a community in the same niche.
    Your blog provided us valuable information to work on.
    You have done a wonderful job!

  7. Stepanie

    Awesome site you have here but I was curious about if you knew of any forums that cover the same topics talked about here?

    I’d really love to be a part of community where I can get comments from other experienced individuals that share the same interest. If you have any suggestions, please let me know. Appreciate it!

  8. Marco

    Hello mates, its great article about educationand fully explained, keep it up all the time.

  9. Viliam

    Hey there! I just would like to give you a big thumbs up for the
    excellent info you have got right here on this post.

  10. Josie

    Hi friends, its enormous articpe on tthe topic of cultureand fully explained, keep it
    up all the time.

  11. John

    Thanks for sharing your thoughts about clean registry. Regards

  12. Taylor

    Wonderful, what a blog it is! Thiss weblog gives helpful data
    to us, keep it up.

  13. Dobar article, hvala puno!

  14. Samantha

    Excellent post. I was checking constantly this blog and I’m
    impressed! Extremely useful information particularly the
    last part :) I care for such information a lot.
    I was seeking this certain information for a very long time.
    Thank you and best of luck.

  15. Spot on with this write-up, I actually feel this website needs a lot more attention. I’ll probably be back again to read more,
    thanks for the info!

  16. Schöner Interessanter Beitrag. Danke. Liebe Grüße

Leave a Reply

Your email address will not be published. Required fields are marked *