Re: Local Admin Privileges in Domain
From: Ulf B. Simon-Weidner [MVP] (nospam2-ulf_at_usw-consulting.com)
Date: 12/07/04
- Next message: kevin_w: "Re: Updating the inetOrgPerson schema in ADAM"
- Previous message: Jack Black: "disabled users query??"
- In reply to: scott: "Local Admin Privileges in Domain"
- Messages sorted by: [ date ] [ thread ]
Date: Tue, 7 Dec 2004 21:37:48 +0000
"scott" <sbailey@mileslumber.com> wrote in message
news:sbailey@mileslumber.com:
> I admin a Win 2003 AD network. All clients are Win XP. I'd like to create
> a
> group on the Win 2003 PDC that only has the 'Users' group as a member, but
> use a GPO to allow any user that I add to that group have
> preferably"Administrative" privileges to their local pc or at least have
> "Power User" privileges to their client pc.
>
> Does anyone have ideas on how best to do this? I don't care if it's done
> with OU's or Groups on the PDC, I just need to have this capability.
>
> Any help greatly appreciated.
Hello Scott,
Using the Restricted Groups feature in the Group Policies you are able
to define the members of a local group of the computers the GPO applies
to (such as Administrators). However you can not have individual
settings (manually configured) per client and the groups you apply here
are on every of the machines, not on a indifidual "this user on that
computer" setting. If you want to do this you'll have to do it manually
or per scripting on each machine, or use a different GPO for each
client which is not the best idea (but technically possible).
-- Gruesse - Sincerely, Ulf B. Simon-Weidner MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz Weblog: http://msmvps.org/UlfBSimonWeidner WebSite: http://www.windowsserverfaq.org
- Next message: kevin_w: "Re: Updating the inetOrgPerson schema in ADAM"
- Previous message: Jack Black: "disabled users query??"
- In reply to: scott: "Local Admin Privileges in Domain"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
