Re: Local administratotor rights on target machines

Hi Roger,
I require this domain account (say X) to be able to add/remove
programs and hardware on these machines. At the same time, X should
have the least privileges at domain level.

Though I linked this GPO to the machine's OU (not domain), I am
suspicious that, I gave X more privileges than required. I request your
suggestions.

I have also added 'domain admins' group to the restricted group along
with X, so that domain administrators also have administrator
privileges on this subset of machines.

Regards
Ram

.