Want to add users to their local Admin group

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Jason Ash (m0ng0lh0rde_at_netscape.net)
Date: 04/20/04 

Date: Mon, 19 Apr 2004 23:03:43 -0500

Hi,

  Here is what I am trying to acomplish, I would like to add a user to
the local Administrators group of a PC. However, I would like to only do
this on the PC that the user will normally be working from, and if any
other user logs in on that PC, I would like them to only be a part of the
Domain.

  In the office I work, everyone has a PC they typically work from. I
would like them to be a member of their local PCs Administrators group,
while Domain wide being part of the Domain Users. I can go around to
each PC, and manually add them to the Admin group, but that will be very
time consuming, not to mention annoying.

  I have not found anything in the GPO that seems to allow me to do this.
If I cannot find an easy way of doing this, than we may just leave
everyone as part of the Domain Users, and if they complain about not
being able to load something, and can justify the need, add them to their
local Admin group.

Any better ideas are welcome.

Thank you,
Jason A. 

-- 
-------------------------------------
Reply to for SPAM only
All others use:
m0ng0lh0rde @ ukonline . co . uk
Remove spaces to send
Thank you
-------------------------------------

Relevant Pages

  • Re: Computer Management Security Problem
    ... Check:To view a user's group membership for a domain, use the resource kit utility Showgrps.exe.. ... Users group to the Administrators group? ... either using the Default Domain GPO or a GPO at the domain level to ... By using a GPO at the domain level and specifying that Domain Users are ...
    (microsoft.public.win2000.security)
  • Re: Logon Script
    ... Administrators group to let all domain users automatically be local admins when they log on to a computer interactively. ... torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.scripting.vbscript)
  • Re: Domain Users
    ... Where do I find the Machine Administrators group? ... Our computers are joined to the domain and we let domain users to logon ... they are not able to run windows updates or install software. ...
    (microsoft.public.windows.group_policy)
  • Re: cant see AD users or groups
    ... I just do not understand why so many people continue to use the DNS Servers ... but when attempting to add domain users to the ... administrators group on the clients computer I can only see local ... I hadn't pointed DNS towards the server. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Give Domain Users Local Admin Rights
    ... >> I added DOMAIN USERS to the local administrators group ... >> How can I grant Local Admin rights to just the PC they ... >> are logged on to without giving them Local Admin ...
    (microsoft.public.windowsxp.security_admin)