MDT 2010: Adding users to local groups

One common task when deploying enterprise machines is to add your desktop administrators to the local Administrators security group. You can do this with a task sequence property.

To add users or groups to the local Administrators group list them sequentially in your customsettings.ini like in this example:

Administrators001=SCRIPTIMUSDOMAIN\Desktop Admins
Administrators002=SCRIPTIMUSDOMAIN\Helpdesk Admins

To add users to the Power Users group use this example:

PowerUsers001=SCRIPTIMUSDOMAIN\Scriptimus Prime

As usual, these are propertys so you can use them in the database or as task sequence variables.


About Andrew Barnes

A Scripting and Deployment Specialist.
This entry was posted in Deployment, MDT 2010 and tagged , , . Bookmark the permalink.

3 Responses to MDT 2010: Adding users to local groups

  1. Maha says:

    Hello, how can I set a password for these accounts assuming I create local accout? Thanks.


  2. Miguel says:

    Hi Andrew,
    thanks for the tip, i was wonder how you add local groups from the task sequence..
    do I just do something like this?:
    Add ‘Set task Sequence Variable’
    TS Variable = Administrators001
    Value = domain\Helpdesk group

    if so, that means I have to add a new variable for each local group?

    thanks for your help,


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s