Set an Account as Local Admin on DUK Windows Server

Preamble

Set Information Systems technicians as Local Admins on specific Windows Servers which fall in Responsibility of IS Engagement Manager or IT Project & Operations Manager
Set Information Systems technicians as Local Admins on specific Windows Servers as Approved by
- IS Engagement Manager
- IT Project & Operations Manager
IS Technician will often require Local Admin rights on specific Servers as part of Project deliverables or as part of their individual Business As Usual task

Requirements

Approval as per point 2 above
Target user is DUK domain account windows: DIABETESUK\myUsername
Access to DUK VPN if Machine is in VPN
Access to request support from DUK Infrastructure Engineers - itlab/content+cloud etc..
An IS Peer who is a Local Admin on target Server
An IS Peer who has Remote Access to target Server
This is usually done in tandem with allowing User to Remote Desktop Connection on to target machine
- https://iservice.diabetes.org.uk/a/solutions/articles/51000039436

Steps

request support (with Approval note) from DUK Infrastructure Engineers - itlab/content+cloud etc..
DONE

for sake of expediency IS peers can action if Points 5+6 above met

Colleague logon remotely (Remote Deskop Connection)
Fig 1 Start button > type: Computer Management
Fig 2 System Tools > Local Users and Groups > Groups > Administrators > Properties
Fig 3Add >>
- check Location is full DUK domain, change to Domain if not so
- type part of name, Press Check Names
- Fig 4 Check Names is an IMPORTANT step. This resolves the name to full Active Directory identity
OK > OK
User is now part of Administrators Group on local machine
DONE

Fig 1 - Computer Management App

Fig 2 Local Administrators properties

Fig 3 Add user, from correct location

Fig 4 Username resolved to Active Directory