Greetings all! I've been looking for away to grant logon privileges (and assign to the local administrator group) to an existing domain user. I've seen code using LSA to provide security privileges to a domain user via it's SID but would like some clarification. The user in question does not exist on the local machine. I would like to know if I need to first create an user account for the user or does the act of setting the privilege do this for me!? Also how would I go about adding this user to the administrator group? Cheers Shane
You have to have someone with Domain Admin status log in and make your domain account a local admin in user accounts. That doesnt give you 100 admin access but its about 99 and will allow you do add remove programs.