WinXp and Win98 on Win2k domain

[coondog]

We have several Win98 pc's(100+) logging onto a Win2k domain server with no problem. Then we decided to add several new WinXP Pro pc's(20+). How do we get WinXp Pro to accept any user that has a valid network account on the Win2k server without severely restricting them? Ex. I have admin rights on the server. When I log onto a WinXP workstation, it allows me to log on, but am restricted to the point that logon scripts that copy the latest virus definitions to the workstation, won't even execute.
Any help would be appreciated

 

[imatthec]

Add your domain admin group to the local machine's administrators group.

 

[koquito]

if you belong to the domain admin group in the domain the automatically when those workstations (XP) join the domain they make domain admin, part of the local admin group of the workstation, so you dont have to worry about adding your account as local admin in the workstation. In case your not one of the domain admin of the domain, the you should do it (imatthec idea). A+, MCP, CCNA
marbinpr@hotmail.com

Keep fighting for your knowledge!

 

[nettworx]

If you want all users to be allowed to add programs to their local computers add domain users to the local administrators or power user groups. There are also ways in your logon script to get it to run the installs as administrator without giving your users any rights to install anything themselves. Scriptlogic may be able to help you out and make your life a whole lot easier. Download the demo and take a look.

 

[coondog]

What is the proper procedure to add domain group(s) to the local group(s)?

 

[nettworx]

On the local workstation go into control panel, administrative tools, computer management, Groups, double click the appropriate group and add member. You may also be able to set up a group policy at the server level.

 

[coondog]

Is there an easy way to copy the 100 plus domain users from the Win2k server to each WinXP workstation so that any user can log onto any WinXP pc? Or is that the wrong way to go about this?

 

[dput]

You should be able to just add the domain users group. I believe all authenticated users are covered there. Dan

 

[coondog]

I tried your suggestions today and they worked. Thanks all.
Now I need to know if there is a way to setup a network printer for one user, on the XP Pro pcs again, and it stay there for all users without using mandatory roaming profiles? Same with other settings such as the proxy settings for IE etc. The reason I would like to stay away from roaming profiles beacuse the network is mostly 10 base T for now.