Adding administrator rights to local computers

[dmarquesdrc]

Hi,
I'm setting up a small domain.
I have some domain users that have access to some network folders.
But I need that a specific user have administrator rights on one specific PC in order to run an aplication that requires administrator rights.
How can I give that user administrator rights for that PC only?

Thanks.

 

[SimonDavies]

Add the users login name to the local administrators group.

Simon

The real world is not about exam scores, it's about ability.

 

[dmarquesdrc]

Ok.

There's any way to do that on the active directory users and computers centrally instead of doing locally?

Thanks in advance.

 

[allywilson]

If I ever want to provide users local admin access (usually for a temporary amount of time) I create a new security group on the domain, call it "Local Admins" add it into the Administrators group on the local workstations (usually put it in before the workstation image is rolled out) and just add a particular user into it. Unfortunately this does make that user local admin for all workstations on the domain unless you restrict which workstations they can logon to (best practice in this situation).

 

[dmarquesdrc]

Ok.

Thanks.
I think that way I solved the problem

 

[porkchopexpress]

Take a look at using Restricted Groups in Group Policy it should do exactly what you want.

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html