Networks

Ask something
Discussion Locked

Laptop Administration

0 helpful
3 replies

by pjkelly 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We have a laptop environment where the user of the laptop MUST be a member of the LAPTOP/Administrators. Since the laptop is a computer in a Domain, the user then becomes a member of the DOMAIN/Domain Admins group. This, of course, is not acceptable in our environment. I remove the DOMAIN/Domain Admins group from LAPTOP/Administrators group, but this doesn't solve the problem. My question is how can a domain user be a member of the LAPTOP/Administrator group without having Domain Admin rights?

3 replies

by scottdo10

When the Laptops are set up for each person, make the domain account for that user part of the Local Administrators group on the laptop. That way they can do whatever they need on the laptop and you don't have to worry about what level their Domainaccount is on.

This discussion is closed to new replies.