Re: Use Active Directory to set work station local rights

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Cary Shultz [A.D. MVP] (cwshultz_at_mvps.org)
Date: 02/10/05 

Date: Wed, 9 Feb 2005 21:51:54 -0500

Eric,

This question is asked quite often. Please take a look at Restricted
Groups.....

Just remember that you want to strongly consider creating this GPO on a
workstation that has the ADMINPAK installed...Otherwise, have fun trying to
figure it all out! I just about tore my hair out [ and as my wife would
point out, it is not 'hairs', just hair! ;-) ] trying to do all of it on a
Domain Controller. Possible, but really difficult. Go with the
workstation solution.

Anyway, you should be doing just about all of your admin stuff on a
workstation, anyway ( but that is how I like to do it...the choice is yours
and I can not tell anyone how to do things... ). 

-- 
Cary W. Shultz
Roanoke, VA  24014
Microsoft Active Directory MVP
http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com
"Eric W. Holzapfel" <e.male@verizon.net> wrote in message 
news:vQzOd.24549$uc.22528@trnddc03...
> Hello Active Directory,
>
> I have a win 2000 server, and would like to be able to allow a group of 
> users to have administrator privileges (not domain administrator privs)
> on the work station(s) then log in to.  I would like to permit admin 
> rights on the workstation without having to go to each work station, and 
> adding the specific user to the local administrators group.  Can I do this 
> with Active Directory and some sort of group policy?
>
> Thanks,
>
> eric

Relevant Pages

  • Re: Logon Failure User Account Restriction
    ... Active Directory and several XP Pro workstations attached to it. ... workstation that acts as a file server. ... enter 'administrator' and 'mypassword' to gain access. ... entirely, reinstalled XP, and only put on networking drivers. ...
    (microsoft.public.windowsxp.basics)
  • Re: VBA code for section breaks
    ... Yesterday while leaving wads of hair around my ... workstation, I was trying to figure out a way to remove all items from ... Taking baby steps and ignorant of a better way first I ...
    (microsoft.public.word.vba.general)
  • Re: Must all users be administrators?
    ... Why would the owner of a business decide to renovate a cubicle for each ... > group on the local workstation. ... Unless the end user is an administrator, ... making a user a member of Domain Admins has the ...
    (microsoft.public.windows.server.sbs)
  • Re: Event ID 6032
    ... So are these files actually on the SBS box, or on the workstation? ... The Recovery Agent does not need ownership, but it has to be the ... Administrator account by default, but it would not have to be. ... decrypt the files by reversing the process in which you encrypted them. ...
    (microsoft.public.windows.server.sbs)
  • Re: "Classic logon" screen in XP does not remeber the user name
    ... not use the default (Administrator) user profile, as a precaution to not mess ... John N ... When I am at the server, ... and log onto a workstation, that workstation immediately goes to a locked ...
    (microsoft.public.windowsxp.security_admin)