The Book

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
=== Add User to Group - CLI ===

[[http://www.windows-commandline.com/add-user-to-group-from-command-line/|http://www.windows-commandline.com/add-user-to-group-from-command-line/]]

In Windows computer we can add users to a group from command line. We can use net localgroup command for this. net localgroup group_name UserLoginName /add

For example to add a user to administrators group, we can run the below command. In the below example I have taken username as John.

<code>
net localgroup administrators John /add
</code>

**//Few more examples:// **

To add a domain user to local users group:

<code>
net localgroup users domainname\username /add
</code>

This command should be run when the computer is connected to the network. Otherwise you will get the below error.

<code>
H:\>net localgroup users domain\user /add
System error 1789 has occurred.
The trust relationship between this workstation and the primary domain failed.
</code>

To add a domain user to local administrator group:

<code>
net localgroup administrators domainname\username /add
</code>

To add a user to remote desktop users group:

<code>
net localgroup "Remote Desktop Users" UserLoginName  /add
</code>

To add a user to debugger users group:

<code>
net localgroup "Debugger users" UserLoginName /add
</code>

To add a user to Power users group:

<code>
net localgroup "Power users" UserLoginName /add
</code>

This command works on all editions of Windows OS i.e Windows 2000, Windows XP, Windows Server 2003, Windows Vista and Windows 7. In Vista and Windows 7, even if you run the above command from administrator login you may still get access denied error like below.

<code>
C:\> net localgroup administrators techblogger /add
System error 5 has occurred.
Access is denied.
</code>

The solution for this is to run the command from elevated administrator account. See How to open elevated administrator command prompt

When you run the ‘net localgroup’ command from elevated command prompt:

<code>
C:\>net localgroup administrators techblogger /add
The command completed successfully.
</code>

To list the users belonging to a particular group we can run the below command.

<code>
net localgroup group_name
</code>

For example to list all the users belonging to administrators group we need to run the below command.

<code>
net localgroup administrators
</code>

To remove user from group:

  net localgroup administrators domain\group /delete\\