Local Admin. right

I think it impossible to list all the privledges. They will be Administrators on that local machine. Any privledges an Administrator holds on that machine, they will have. Which is just about everything, in fact, I can't think of one they wouldn'thave. If they didn't have it, as an administrator, they could easy give the privledge they don't have to themself. I would recommend doing this in any business environment.

The privledges will only be for that machine though, not for the domain, if one exists.

I agree with above that they will have ALL priv's. This should NOT be done except in a home environment. In a business setting, the user could really mess things up and not inform you of the actions he has taken. The only advantage that I see is total control without logging on as admin.

It will give them total admin rights to the local machine so they can do things liek installing software. It can be very useful even in a business environemnt with well trained staff (particularly developers who have to install updates and patchesto compilers etc on a frequent basis) - if they don't have these rights, then you are going to spend a lot of time installing stuff on every machine.

Beware of gigiving these rights to users who have no real PC knowledge (but who think the y know it all) as they will tend to stuff up thier machines very easily.

In my last position as SysAdmin, all my users had local admin rights on their NT boxes - but we also had a set of Ghost images making rebuilds very easy.

Currently I am not sys admin at this job, but they still give us local admin rights.

This question was closed by the author