Make a user a local admin but not domain?

[programerrusuk]

Is it possible to make a domain user a member of the local admin group, this is that the user can install software ect. but without domain admin privaligies???

 

[TruBlu01]

Add them to the local admin group on the particular PC

 

[programerrusuk]

kk thought so but can u use one of those {S765258w4-34257368-234962875} type codes or is their not one for local admin?

 

[duke2106]

Add the user's domain account to the Administrators group on the local computer using Computer Management. When they login to the domain, they will be a local admin on the computer, but not the domain.

You should not even see those numbers if the computer can contact a domain controller. You should be able to just use (domain)\(username), i.e. domain1\user1

 

[tex52]

The best way to do this is through restircted groups (RG). This way you are sure who has Local admin and Power User rights on all moachines in your domain. If you have restircted groups setup every time users login the only local access that is allowed is that specified by the RG. You dont have to go to the local machine either to set this so it makes it easier and much more managable.