IT Employment

General discussion


Giving Domain users the ability to load software.

By NYITdude ·
This is driving my nuts. All I want to do is give roaming user profiles the ability to be a local admin, power user, or user on any workstation they log into. I have a situation where I have multiple doctors using whatever computer they can get to, so as they can run their software, get outlook email, and access to their files.

I know the GPMC is part of the answer. But why is it so difficult to set a domain user to a local admin or power user?? I know that local admin and power user accounts are not available on a Domain, but it can't be this difficult. I have been all over the web and in books, could really use some help. Thanks!

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

Domain Admins

by Lost_one In reply to Giving Domain users the a ...

By default Domain Admins have local admin rights. Not sure if this would be the best way to go.

You could go to each work station and set them up as local admins.

Collapse -

thanks.. but

by NYITdude In reply to Domain Admins

I am trying to avoid doing that. I have about 20 doctors in 3 locations traveling to any one of these locations on any given day. The roaming user profile is nice because of the sharing of workstations, but they are only domain users right now and need to be able to run interactive CD's andor DVDs on the workstations. This requires installing them, as well as any updates that follow. I dont want them to be Domain Admins, nor do I want to add every doctor to every workstation in all 3 locations. This is silly that there isnt an easier way to get this done.

Thanks for your help.

Collapse -

Do it localy...

by ZENYO In reply to thanks.. but

You don't have to add every doctor to every workstation in all three locations... You could ad the domain users group (or create a special group) to every workstation one time, that will work for anyone who authenticates to the domain (or is part of the special group that you have created).

Collapse -

I understand I think...

by NYITdude In reply to Do it localy...


Thanks for the input. I have figured out that I can go into AD Users and add domain users to the workstations local accounts via AD user& computers, in the computers folder and manage each workstation. But being I have not rolled out any new workstations, I dont have everyone setup is going to be a nightmare. I would like to set the domain user to access the workstation locally with a local group via a script or GPO or both, aka power users. This way I can manage the network remote off site as well as on site. I see this is an issue while browsing the web looking for answers. I just dont understand why somthing like this should be so simpe, yet it is such a pain to figure out.


Collapse -


by neebski In reply to I understand I think...

I am looking to do the same thing. But I would not want my users to be able to install software. Everything a power user could do but install software. Is there anyway of doing this in GPM?


Collapse -


by deepsand In reply to Giving Domain users the a ...

Try the "Questions" forum; the "Discussion" forum is for matters of general discussion, not specific problems in search of a solution.

Post problems such as this to the "Question" forum, rather than the "Discussion" forum. There are those who specifically seek out problems in need of a solution, and that's where they go to look for such.

Additionally there are the benefits that:

1) The "Questions" forum provides for your feedback, by way of your being able to mark "helpful" responses as such. This does not necessarily mean that a given response contained the complete solution to your problem, but only that it served to guide you toward it. This is intended to serve as an aid to those who may in the future have a problem similar to yours, so that they might have a ready source of reference available, thereby perhaps obviating the need for them to repeat questions previously asked and answered.

2) The revised TR makes it quite difficult to find both "Discussions" and "Questions" that have not had a fairly recent post, owing to some functions comingling them in the listings. By keeping each type in their respective forums, it is easier for all to find what they are looking for.

Collapse -

Add/remove local pc admin rights

by unitech.system In reply to Giving Domain users the a ...

Run the below script to ADD the localadmin rights to the user.

%SystemRoot%\system32\net.exe LOCALGROUP /ADD "Administrators" "NT Authority\Interactive"

Run the below script to DELETE the localadmin rights to the user.
%SystemRoot%\system32\net.exe LOCALGROUP /DELETE "Administrators" "NT Authority\Interactive"

Related Discussions

Related Forums