Re: Group Policy for WinXP local administrator rights

Just to expand on that, you can also use "interactive" in place of
%username%. This will mean that anybody who already has the right to do an
interactive logon will get admin when logged in to the machine. If you just
give "domain users" admin rights to all workstations, bear in mind that they
will also gain admin rights over the network to other machines. They could
then run processes on remote machines (for example, to log keystrokes, take
screen captures, or take over the identity of a user logged in to another
machine).

Oli


"Haim Lazarovitch" <HaimLazarovitch@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:5E255433-7442-4814-A27E-9EEB112C8186@xxxxxxxxxxxxxxxx
> hmm...just create a logon startup script in computer_policy !! (very
> important to do that under compuer policy we want it to add by system
> accound
> with privilege)section with that command (you can do the with bat file):
>
> net localgroup administrators %username% /add
>
> "John Lenz" wrote:
>
>> I want to setup the group policy fro a WinXP domain users to have local
>> administrator rights on their PC as well as control panel change access.
>> Where can I obtain a listing of settings to accomplish this?
>>
>> Thanks
>>
>>
>>


.

Relevant Pages

  • Re: locked out of XP - third party utility ?
    ... That sounds weird - username is case sensitive. ... right for logon locally may have been configured to be only domain users ... > on an WinXP laptop used by a sales rep, the system will apparently not let ... > is this done by WinXP or a third party utility? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Local admin domain user
    ... >while still remaining standard domain users. ... admin rights be default if you joined a domain...). ... group "Domain Users" to the administrators group. ...
    (microsoft.public.win2000.security)
  • Re: VBS script not running when user logs into windows
    ... While UserName = "" ... Sub MapDrive ... If INGROUP ("domain users") Then ...
    (microsoft.public.windows.group_policy)
  • Re: Minimum security
    ... > Should I add domain users to the power users group locally instead? ... requires local admin rights, make them regular users. ... > share and like I said domain users are local administrators. ... > roaming profiles I am using right now are working fine. ...
    (microsoft.public.win2000.security)
  • Re: Give Domain Users Local Admin Rights
    ... >> I added DOMAIN USERS to the local administrators group ... >> How can I grant Local Admin rights to just the PC they ... >> are logged on to without giving them Local Admin ...
    (microsoft.public.windowsxp.security_admin)