Windows Forum

Ask something
Discussion Locked

Admin rights

0 helpful
5 replies

by mcoya

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
If I grant Administrative rights to users logging on to my domain does that also give them local admin rights, to allow them to modify the registry. I gave them admin rights in the local PC.

5 replies

by billc124

If you gave them admin rights at the local level, then yes they will be able to modify the registry and install hardware/software, pretty much they would have complete control of the system. How do you mean if you grant administrative rights to users logging on to your domain, did you make them part of the domain admins group or did you make them administrators of the Domain controller? If you added them to the local admins group of the domain controller, then they will be able to change registry on that PC, etc... What exactly do you want to accomplish? That would make it easier for me to give you the answer you are looking for.

by benyo

Add users in the Domain Users group in User Manager. DO NOT ADD THEM TO THE DOMAIN ADMINS GROUP!!!! They'll be able to do anything anywhere on your network. If you want ALL users to full admin rights to all PCs, just add the Domain Users group to the Administrators group on each local PC.

Let me know...

This discussion is closed to new replies.