Windows Forum

Ask something
Discussion Locked

Domain Users--Full Rights to local sys

0 helpful
5 replies

by parameshst 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi... all of you,

I want to give full rights to our domain users( WIn2k Domain) to their local systems. All users make use of the same systems daily (no need of roaming profiles). I want them to get full rights to install all software( group policy does not solve the purpose because I want them to install all junk utilities) which requires admin privilages, yet they should not get access to the entire domain and also to change the Ip address/System name, time and other systems settings.
I have tired making the users the member of the power users group of the local system, this works but doesnot let to install all software. And also if make the user a member of the local administrators group, he gets access the cahnge Ip address/name .... .

I have made use of the Active Directory Users and Comp--->comupters---> properties--->users and groups--- for the above setup.

How can I overcome this, any ideas. Please help.

thanks and regards,
Parameshwar

5 replies

by dwdino

First of all this is a poor idea from a support/security/admin standpoint.

right a login script with the following:

net localgroup "Administrators" "domain/everyone" /add

This discussion is closed to new replies.