Re: adding user to any local user group after first login


"Chandra via WindowsKB.com" <u25485@uwe> wrote in message
news:783da7c83ef2b@xxxxxx
Hi,

In our domain, we are connected around 100 PCs. except for a user
(myadmin),
we have given all other users as domain users power only.

However if any user require admin rights for their PCs we give admin
rights
to their user name in that pc through the myadmin user only.

Since some of the users are changing their pcs frequently whenever they
ask
admin rights to their PCs we are going to their location and giving admin
rights. We couldn't able to connect their pcs remotely through Dameware
Remote control since their user id is not even in power user group in that
local machine since their are logging to that pc with their ID for the
first
time.

I don't personally think you should be giving out admin, even local admin,
like this in the first place but still...

As I understand your post
* anyone who wants can be an admin
* they don't always use the same machines, they move around a lot

I'm going to propose a different solution based on that - you create a group
in your domain, and this group is added to each workstation's local
administrators group as part of your default build / group policies.

You can then add and remove people from this group on the domain quite
easily, granting them local admin rights on any and all machines without any
further support burden.


.

Relevant Pages

  • Re: Software Audit & Enforcement - Required?
    ... domain admin password. ... Who then has access to the Admin rights on the companies ... The local admin account on each laptop is disabled by default, ... You prevent people from installing software by removing them from ...
    (microsoft.public.security)
  • Re: Running programs for non-previleged users on XP
    ... insist a user be able to use an application without having Admin rights. ... on running the software under the Local Admin context. ... >> The administrator group user finishes installing the program. ...
    (microsoft.public.win2000.security)
  • Re: Administrators Permission on Network
    ... >network administrators, but all i did was set up ... That bank needs a new admin. ... >>they'd never have given you local admin rights to begin ...
    (microsoft.public.security)
  • Re: Use not local admin Outlook Fails
    ... > cation itself admin rights when the user ... > is not a local admin on the client machine? ... you can't grant an application rights that pertain to a user. ...
    (comp.databases.ms-access)
  • VB6 program needs to run and install without admin rights.
    ... PCs. ... not require admin rights (for modifying/creating excel and text files ...
    (microsoft.public.dotnet.languages.vb)