I want to make every user on a specific machine administrator. I created an
app that uses the net localgroup command to assign the interactive security
principle to the Administrator group. The results are unpredictable. After
each logon, the useres get more and more rights until they finally have
full administration rights(!). Strange things happen, when I try to assign
a user to the Administrator group using the net localgroup in an
application that runs as (un)secure system user. It seems that the net
localgroup doesn't work poperly when used in system account context. Anyone
any idea how to get the problem solved? Policy is not an opption because
admin rights should be tied to single machines.