Grant Local Admin privileges to domain users? 2

[jgoodman00]

I want to be able to grant certain users local admin privileges to their computers. They have standard domain user accounts. I do not want to elevate their permissions within the domain, just on their local computer...

Any ideas?

James Goodman MCP

http://www.angelfire.com/sports/f1pictures

 

[Davetoo]

If it's just a few users, simply go to their computers, go to Control Panel/Users and Passwords and add their domain user accounts to the local admin group.

It can also be done via group policy at the server, but if it's just a few users, it would be simplier to just do it the above way.

I'm Certifiable, not certified.
It just means my answers are from experience, not a book.

 

[jgoodman00]

Cheers,

Where is this implemented is group policy?

James Goodman MCP

http://www.angelfire.com/sports/f1pictures

 

[jpatrick]

I have what I believe to be the same question... does anyone know in group policies (the exact) location.... process.... to give local admin rights to a domain user?

thanks

 

[vbrocks]

In win2k you go to computer management under administrative tools.

 

[FloodGuy]

The easiest way to accomplish this for a couple of users is to log on to the local machine as domain admin....go to command prompt (Start\Run\Cmd) and type:

net localgroup administrators domainname\username /add

 

[CasDeTroy]

James if you are running active directory you would need to create security grps for your users with every grp with levels of access.

Lets say all class 1 in the classonegrp, now make this group local admins and you should be fine.

Ö¿Ö

 

[mmv]

You cannot give the user admin rights with a GPO.

There is however a way through the login-script using WMI.

 

[francisdela]

These links may be useful

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q320065

http://www.serverwatch.com/tutorials/article.php/1476811

 

[GrnEyedLdy]

JPatrick,

Open Computer Management on the local PC. Expand Local Users and Groups, Dbl-click Groups. Right-click the Administrators groups and choose Properties. Click ADD and browse for the domain user you want to give Local Administrator rights to.


Patty

 

[vbrocks]

If the permissions are copied from the domain controller, in order to use them at the local computer they must login like this ......

for example ... username = vbrocks@yourdomain.com
password = their Domain Password

 

[mysteryn11]

I hate permissions and rights.