does user have local admin rights

[mrmovie]

Hello Everyone,
as you can gather i want to determine if user has local admin rights. i can query for his/her account being a member of admin group. i could go so far to check which groups the user was a member of from AD and then check if these groups were in the local admin group. this would still not be good enough, could have nested groups etc etc.

anyone know of a way to determine outright???

cheers,
Richard

 

[mrmovie]

according to MS, one can determine by being able to write to a value to HKLM reg hive,,,,,sounds like balls to me...how do i close this thread??