Make AD user an admin on client machine.

[roystreet]

Hello,
I have a AD users that of course can log on to all of the machines on the directory. But when they log on, they are only given a basic user rights & not an admin account on their local machine. Is there a way I can setup the user so that they become an admin on the workstation they log on to?
Coupled with this question is...Can I chose what permissions they can have for the machine they are logging into?

Thanks...
---roystreet

 

[Infinity306]

I don't think so unless you set up a local user account on that computer.. Domain Logins would be tied to the user level they have in the domain..

 

[windowsfan]

you can add that domain\user to Administrators group on local machine and he will have full right on that PC.

 

[josephdavis]

roystreet,

All you have to do add the domain account as a member of the local administrators group on their workstation. Said user would then have local administrator rights on that workstation only.


-Joe

http://joe.galactik.com

 

[58sniper]

This has been asked and answered here countless times.

[google]Windows Server 2003 Restricted Groups[/google]

Pat Richard
Microsoft Exchange MVP