General discussion


Local Administrator Rights

By AlphaNet ·
Under win2003 how do I setup a user in a domain to have administrative access to there local machine.

For example:

#1) The users in the domain can login and access the things on the network server they need to but can't do simple things like change there screen saver settings.

#2) They can't install local software like peachtree on there local machine?

Is there a LOCAL ADMIN right somewhere I'm not setting correctly?

This conversation is currently closed to new comments.

4 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by coucha In reply to Local Administrator Right ...

By default all users are Domain users. In order for them to have Administrative privileges on the local machine, they must be assigned it on the local machine. You can do this by logging into the Domain as Administrator on the local machine and adding the user to the Administrator Group. This is however risky, because then the user can install whatever they want, including spyware programs and the like.

Hope that helps!

Collapse -

by SonicClang In reply to Local Administrator Right ...

Why don't you add the user to the "power users" group first. That really should be all the access they need to their local machine. If that's not enough you can always bump them up to the administrators group. I just don't like adding users to the admin group unless absolutely necessary, and it's normally only temporary when I do it.

Collapse -

by kdbtech In reply to Local Administrator Right ...

I think that prior to giving admin rights to the users, I would take a long hard look at creating a Group Policy Object which allows the users to change their desktop settings. Apply this gpo to whatever level you like in your heirarchy and call it a day. Also, software installation can be easily managed through a GPO as well. Simply deploy whatever software you require your users to have. If not all users require the same software, publish it in Active Directory instead of assigning it (especially if you don't have an .msi package) This way, users can access software for installation through add/remove programs and there typically are no permission issues that way.

Hope that helps!


Collapse -

by jtumeo In reply to Local Administrator Right ...

If you use active directory you can go into the gpo editor and drill down to the OU that you want to set the Administrator to. Under windows componets you will find restrictive groups.
Add new groups and type in Administrator as the group. Add the members you want to be in the the local group to the members group area. Remember though it will remove anyone that was in there previously so you will have to add them to this GPO.

Back to Networks Forum
4 total posts (Page 1 of 1)  

Related Discussions

Related Forums