Domain Logon

[tecknogeek]

Can some one tell me where I can find the setting in group policy that allows a domain user who logs onto the domain to have admin control over that or any local PC they use to log in with?

Any help appreciated.........

 

[porkchopexpress]

You can either manually add them to the local admins group or use a script.

Or use restricted groups

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

 

[tecknogeek]

What type of script do I need to run? Will it give them admin privlige on the local machine.
Thanks again,

 

[porkchopexpress]

You can use a VBscript to add users to the local admins group take a look at these examples.

http://www.activexperts.com/activmonitor/windowsmanagement/adminscripts/usersgroups/localgroups/