Admin locall vs domain Admin 1

[wtotten]

I just installed SBS 2003 Server. I installed some XP Pro clients. I want some of the users to have admin rights on their own computers but not on on the server or the rest of the domain. On the client computer the user is a member of the local_machine\administrators group. However, when they try to install software, they are told they don't have administrator rights and need to logon as an administrator to install the software. The network uses AD, the computers are in the domain and the users logon to the domain. How can I configure it so selected users have admin rights locally, but not admin rights on the domain?

Bill

 

[WhoKilledKenny]

I've run accross this, but it is rare. Sounds like you have the users set up correctly. The Software wants the the actual administrator account (not a member of the local admin group) logged on when installing. Try logging on as Administrator and the logon to: set to the local computer name (not the domain).

 

[porkchopexpress]

Restricted Groups can help you control local group membership.

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

 

[pgaliardo]

In addition to the above, if they are loggin on using a domain account, make sure you are adding the domain account to the local PC admins group (domain_Name\User_Name). If you are adding just a local logon to the local admin group, it will have no effect.