Well, you could set a scheduled task to remove the account from the local admin group and schedule it for 30 days in the future, but realize that if you have admin rights you can just delete the task ;)
There really isn't a "good" way of doing what you want, that I can think of. Unless you use AD Restricted Groups and just have group policy handle it. That will be messy to setup initially, since you need a security group for each computer your going to do this on. Christopher Catlett Consultant | Detroit [MCTS_2013_small] Sogeti USA Office 248-876-9738 |Fax 877.406.9647 26957 Northwestern Highway, Suite 130, Southfield, MI 48033-8456 www.us.sogeti.com<http://www.us.sogeti.com/> From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Rajan K Sent: Friday, October 18, 2013 12:07 PM To: scripting@lists.myitforum.com Subject: [scripting] Temporary Local Admin rights Hi, I need a script to provide Local admin rights to current logon users for 30 days. After 30 days Local admin rights need to be removed automatically from the PC. Any solution available.? Regards Rajan
<<inline: image001.jpg>>