Group Policy Setting 1

[IanRitchie]

Is there a setting in Group Policy to allow a normal domain user to log onto a client with either local admin or local power user rights?

I would need to apply this policy to all clients in the domain.

Thanks.

 

[qtin]

In a round about way - yes

You could used restricted groups to add a user to whatever local group you want to.

A better way might be to create a group with that user in it. Add that group to the PCs using restriced groups. That way you can add as many users you want to and they will be local admins / power users.

We use that exact setup to add our desktop group as local admins on all the workstations.

One catch - restricted groups will wipe out whatever settings are on the PC in the group you replace.

More info:

http://support.microsoft.com/default.aspx?scid=kb;en-us;320065

 

[bofhrevenge2]

I second qtin's suggestion i use the restricted groups feature on an OU in our Active Directory and it works very well.

 

[IanRitchie]

Thanks for the help, I'll try it today.