Add user to group from command line (CMD)

by admin on May 25, 2009

In Windows computer we can add users to a group from command line. We can use net localgroup command for this.

net localgroup group_name UserLoginName /add

For example to add a user to administrators group, we can run the below command. In the below example I have taken username as John.

net localgroup administrators John /add

Few more examples:

To add a domain user to local users group:

net localgroup users domainname\username /add

This command should be run when the computer is connected to the network. Otherwise you will get the below error.

H:\>net localgroup users domain\user /add
System error 1789 has occurred.
The trust relationship between this workstation and the primary domain failed.

To add a domain user to local administrator group:

net localgroup administrators domainname\username /add

To add a user to remote desktop users group:

net localgroup "Remote Desktop Users" UserLoginName  /add

To add a user to debugger  users group: 

net localgroup "Debugger users" UserLoginName /add

To add a user to Power users group: 

net localgroup "Power users" UserLoginName /add

This command works on all editions of Windows OS i.e Windows 2000, Windows XP, Windows Server 2003, Windows Vista and Windows 7. In Vista and Windows 7, even if you run the above command from administrator login you may still get access denied error like below.

C:\> net localgroup administrators techblogger /add
System error 5 has occurred.
Access is denied.

The solution for this is to run the command from elevated administrator account. See How to open elevated administrator command prompt

When you run the ‘net localgroup’ command from elevated command prompt:

C:\>net localgroup administrators techblogger /add
The command completed successfully.

To list the users belonging to a particular group we can run the below command.

net localgroup group_name

For example to list all the users belonging to administrators group we need to run the below command.

net localgroup administrators

Related posts:

Add new user account
Delete user account

{ 40 comments… read them below or add one }

Anonymous September 6, 2010 at 4:55 am

How to add a group to another group?


admin October 26, 2011 at 4:26 am

you can use the same command to add a group also. For example, to add a domain group ‘Domain\users’ to local administrators group, the command is:

net localgroup administrators domain\users /add

žoge March 30, 2011 at 6:49 am

How can I add a user to a group remotely?


Derick February 24, 2012 at 8:28 pm

Using pstools, it is a good tools from Microsoft.

Anonymous August 5, 2011 at 5:18 pm

While this article is two years old – it still was the first hit when I searched and it got me where I needed to be. Another great tip is the syntax for doing a runas, because I needed to elevate a user's privileges to admin from within his account:

runas /user:Administrator@DOMAIN "net localgroup Administrators DOMAIN\username /add"

Good stuff.


Ben March 13, 2012 at 2:18 pm

awesome! I’ve been wanting to know how to do this forever. thanks so much. for some reason, MS has made it impossible to authenticate protected commands via the GUI. seriously frustrating! this makes it all better.

Keith Poole January 30, 2013 at 10:14 pm

Is there a way to trough a password into the script for the admin account if it is known and generic

Mike C. June 28, 2014 at 11:47 pm

I tried the above stated process in the command prompt. Got to the point where it say’s “type in pass word” I start typing nothing happens. Curser does not move. Any suggestions. Windows 7 Ultimate system.

renni September 9, 2011 at 10:32 am

How to set password to never expire ?


admin September 9, 2011 at 2:54 pm

You can run the below.

wmic useraccount where name='loginid' set passwordexpires=false.

Reue December 28, 2011 at 3:31 pm

Is there any way to add a computer account into the local admin group on another machine via command line? Thanks.


admin January 4, 2012 at 5:27 pm

I don’t think that’s possible. However, you can add a domain account to the local admin group of a computer.

Casey July 14, 2014 at 6:38 pm

You might be able to use telnet to get a CMD shell. However, that would assume that you already have creds with the machine to build the telnet connection. If it were any easier than that it would be a massive security vulnerability.

Steve February 11, 2012 at 7:29 pm

Dude, thank you! On xp, the server service was not installed so couldn’t add via manage. User CtrlPnl gpf’s is broke (something about html app host error). In 3 seconds, you provided a way to fix that MS couldn’t with all their idiot wizards…


Derick February 24, 2012 at 8:24 pm

Hi Reue,

Yes you can add any users to other computers remotely using the pstools.


Prashanth March 6, 2012 at 11:06 am


I have a requirement something like this:

I need to create a user account on a remote server which should be a part of the local administrator group. How should i set password for this user account ?

Can any one help me please?

Thanks in advance,


admin March 7, 2012 at 2:52 pm

Read this: Add new user account from command line
Using psexec tool, you can run the above command on a remote machine.

Aroon April 19, 2012 at 6:52 am

I changed the admin account’s rights to user account and now i have only two accounts with only USER rights, nothing with admin. When ever i change any application, it says ” Right Admin Password” and there only comes NO and therefore i am unable to enter Admin Passowrd. Also i m unable to open cmd.exe as Admin. Please Advise.


Casey July 14, 2014 at 6:41 pm

Reinstall Windows. You literally broke it. I’m curious as to what edition of Windows you have, as most won’t actually let you remove the last member from the Administrators account, to avoid your very issue. For future reference, there’s really no good reason to ever make Administrator a mere User :P

Deepak Sati June 23, 2012 at 3:21 pm

how can I add multiple domain users into local administrator group together with the single line command?


admin June 27, 2012 at 5:34 am

You can specify as many users as you want, in the same command mentioned above.
For example, to add three users :

net localgroup administrators domain\user1 domain\user2 domain\user3 /ADD

Anonymous October 12, 2012 at 4:29 am

I don’t have access to the administrator account, but I do have access to my son’s
Standard Account. Please help.


Chris Olson April 19, 2013 at 5:10 pm

I am trying to add a service account to a local group but it fails. Is there syntax for that? I’ve tried many variations but no go. See below:

net localgroup “Event Log Readers” “NT Authority\Network Service (S-1-5-20)” /add


Kiran February 10, 2015 at 6:10 am

Hi Chris,
I am trying the exact same thing ,to add network services to Adminstrators of Local Users and Groups .Did you find the solution.Please let me know.

Thank You

Kiran February 10, 2015 at 6:11 am

Hi buddy I found the solution.Let me know if you still need it:-P

admin February 10, 2015 at 11:07 pm

Hello Kiran,
Please add the solution here for the benefit of others. Thanks.

JKarhani March 11, 2014 at 3:23 pm

Thank you for this bunch of commands,
I have 2 questions:-How can I add all users in an Organisation unit into one group in Active directory ?
– & how can I add all users in Active Directory into a group?


bret June 16, 2014 at 12:10 pm

1st make sure you have Remote Server Administration Tools (RSAT) add in features installed. Then click start – type cmd – hit Enter.
Type in commands below, replacing GROUP_NAME and OU_NAME with corresponding names (note that “‘ is double quote followed by apostrophe) then hit Enter and watch results:
for /f “tokens=*” %a in (‘dsquery ou -name “OU_NAME”‘) do for /f “tokens=*” %b in (‘dsquery group -name “GROUP_NAME”‘) do for /f “tokens=*” %c in (‘dsquery user %a -limit 0′) do dsmod group %b -addmbr %c

for /f “tokens=*” %b in (‘dsquery group -name “GROUP_NAME”‘) do for /f “tokens=*” %c in (‘dsquery user -limit 0′) do dsmod group %b -addmbr %c

Jorge March 27, 2014 at 3:44 pm

I do not have the administrator password eeven i do not want to reset because there are many apllications using this password.

Is there are any way to create a new user with admin previleges into domain and works like a administrator clone. So i can log in with this new user and work like administrator.

Is i boot and using “repair” option i need to have the admin password…
Is there are any way i can add a new user using another software?



admin March 29, 2014 at 7:30 am

AFAIK, That’s not possible. Otherwise anyone would be able to easily create an admin account and get complete access to the system. I think you should try to reset the password, you may need it at any point in future.

ALOK May 17, 2014 at 11:08 am

how can i open administrator account or super administrator account from user account when i cannot open cmd as administrator?


Casey July 14, 2014 at 6:44 pm

You can’t. That’s the point of Administrators. If you don’t have credentials as an Admin it’s probably because you were never meant to. Allowing you to do so would defeat the purpose.

That said, there is a workaround involving running a cmd prompt basically as SYSTEM, but honestly, I’m not about to disseminate information on how to defeat security protocols. Sorry. It’s an ethics thing.

joey July 29, 2014 at 5:07 am

C:\Windows\System32>net localgroup administrators All /add
System error 5 has occurred.

Access is denied.
how i can fix it


joey July 29, 2014 at 5:11 am

and i do not know password admin
(canot do this)
elow is the procedure to open elevated administrator command window on a Vista or Windows 7 machine.

Click on Start button
Search for command program by typing cmd.exe in the search box.
Right click on the cmd.exe entry shown under the Programs in start menu
Select ‘Run as administrator’
Click on ‘continue’ if user account control asks for confirmation.

The above steps will open a command prompt wvith elevated privileges.

Walter August 13, 2014 at 4:49 pm

Hello all!

I am trying to get a user prompt for net localgroup Administrators /add \%u% to pop up while the batch file is running, I have tried adding Set /P after /add , is there something I’m missing to make it do this?


Danny C December 19, 2014 at 4:45 pm

Worked perfectly for me, thank you. For the life of me the pc would not allow me to add a domain account to the local admin group, just wouldn’t work. Tried this from the command prompt and instant success. Thank you again!


pjcamp January 15, 2015 at 3:07 am

Doesn’t work. “The trust relationship between this machine and the primary domain failed.”


william January 29, 2015 at 6:18 pm

Hi there, I accidentally turn my admin user into a standard user one. How do I change it back because when ever I try to download something my computer says that I don’t have permission. Thanks. ( I have Windows 7 )


Lorenzo March 7, 2015 at 10:34 am

Great! Thanks :)


Etzard March 23, 2015 at 1:35 pm

Hi Guys

I sort of have the same issue. I have a domain user DOMAIN\User on a laptop, but the user was never added to Local Admin. So this user cant make any changes. I have tried to log on as local admin, but still cant add the user to the group. It’s like the user does not exist.

So how do I add a non local user, to local admin?


Windows 7 Professional 64


Leave a Comment

HTML tags are not allowed.

Previous post:

Next post: