Does the User Have to Have Admin Rights?

I have always setup the users as Power Users on the local machine, then place them in the Users Group on the server. The way you do this is right click on My Computer + Manage + Local Users and Groups + Dbl Click the user name for the machine + Advanced + Find Now + and DBL Click Power Users.

This is the best way to keep them from being grouped with Admins on the network.

Best Regards!

Todd Kimbrell

I agree with Todd, as them to the users and power users group. It gives them sufficient rights to the machine but not enough to destroy it.

I agree with Todd, as them to the users and power users group. It gives them sufficient rights to the machine but not enough to destroy it.

The quick fix is to add them to the Power Users, but if you only need the ability to add printers, why not create a custom local security policy.

We add the users to the local machine admin for certain programs that they need admin privileges for but they are not admins on the network/domain. As for printers, we find the average user's abilities lacking in that area. We will set up any periferals that are "authorized" and necessary. We use mainly network printers that require ip settings to be setup on the machines.

Perry

We give users POWER USER, with select developers and the HelpDesk with local admin rights.

This question was auto closed due to inactivity