Re: Domain Admin?

Tech-Archive recommends: Fix windows errors by optimizing your registry

Matthew - no - you should not use Domain Admin group in this case. The
easiest way to get this accomplished is to use Restricted Groups GPO setting
(you can find more about it at
http://technet.microsoft.com/en-us/library/cc785631.aspx) to ensure that the
user you designate is a member of the local Administrators group on each
target computer. If you want to limit the scope of this GPO to desktops
only, you can use WMI Filtering (as described at
http://technet.microsoft.com/en-us/library/cc758471.aspx)

hth
Marcin

"Matthew" <"system[spam]tyrant"@gmail[dot].com> wrote in message
news:uhZXaHfNJHA.3876@xxxxxxxxxxxxxxxxxxxxxxx
I have a user I need to be able to run as administrator on desktop
computers, but I don't want them to have admin rights on the server. Does
the Domain Admin group do that? If not, can it be done and how?


.