Tom's Hardware > Forum > Windows 2000/NT > Windows 2000/NT General Discussion > Allow user to have Administrator rights
Ask the community Add a reply
Word :    Username :           
 
Anonymous   02-09-2005 at 11:05:31 AM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

 

Hello GPO experts,
I would like to set up some "rights" to allow a user to have
administrator rights on a workstation, when logged in to the domain.
So far I have a OU (Desktops), I put a user(s) in the OU, and also
created a group (security) "AllowAdminPriv", under this OU. My problem
is how do I configure this gpo, for the admin rights, for a given
workstation/user combination? I have also looked at the Restricted
Rights area in the gpo edit window, for both Computer and User. I do
not see how to do this. I want various users to be able to install
updates to software, without the administrator having to go to 20
computers each month to install updates.
Any info will be greatly appreciated,

Thanks,

eric

P.S. the server is Windows 2000 with active directory, etc

Add a reply
Sponsored Links
Register or log in to remove.
Anonymous   02-09-2005 at 11:05:32 AM
- 0 +

Archived from groups: microsoft.public.win2000.group_policy (More info?)

 

If you want to enforce the local administrators to be just the groups you
specify in "members" just add your AllowAdminPriv global group and domain
admins to be the groups for "administrators [right click and add
administrators, then configure]. If you don't want to enforce the membership
of the local administrators group of the computers in the OU and you are
using SP4 for your domain controllers then use the "member of" option and
add administrators as the group to be member of [right click and add your
group, then configure]. The links below should help. Note that restricted
groups are computer configuration and the computers you want apply
restricted groups to must be in the OU. --- Steve

http://support.microsoft.com/defau [...] -us;320065
http://support.microsoft.com/kb/228496/EN-US/

"Eric W. Holzapfel" <e.male@verizon.net> wrote in message
news:vSgOd.13839$uc.10939@trnddc04...
> Hello GPO experts,
> I would like to set up some "rights" to allow a user to have administrator
> rights on a workstation, when logged in to the domain.
> So far I have a OU (Desktops), I put a user(s) in the OU, and also created
> a group (security) "AllowAdminPriv", under this OU. My problem is how do
> I configure this gpo, for the admin rights, for a given workstation/user
> combination? I have also looked at the Restricted Rights area in the gpo
> edit window, for both Computer and User. I do not see how to do this. I
> want various users to be able to install updates to software, without the
> administrator having to go to 20 computers each month to install updates.
> Any info will be greatly appreciated,
>
> Thanks,
>
> eric
>
> P.S. the server is Windows 2000 with active directory, etc

Reply to Anonymous
Anonymous   02-09-2005 at 08:32:27 PM
- 0 +

Archived from groups: microsoft.public.win2000.group_policy (More info?)

 

"Eric W. Holzapfel" <e.male@verizon.net> wrote in message
news:vSgOd.13839$uc.10939@trnddc04...
> Hello GPO experts,
> I would like to set up some "rights" to allow a user to have administrator
> rights on a workstation, when logged in to the domain.
> So far I have a OU (Desktops), I put a user(s) in the OU, and also created
> a group (security) "AllowAdminPriv", under this OU. My problem is how do
> I configure this gpo, for the admin rights, for a given workstation/user
> combination? I have also looked at the Restricted Rights area in the gpo
> edit window, for both Computer and User. I do not see how to do this. I
> want various users to be able to install updates to software, without the
> administrator having to go to 20 computers each month to install updates.
> Any info will be greatly appreciated,
>
You need only to add AllowAdminPriv domain group to Administrators local
group on every workstation...

Reply to Anonymous
Ask the community Add a reply
Tom's Hardware > Forum > Windows 2000/NT > Windows 2000/NT General Discussion > Allow user to have Administrator rights
Go to:

There are 556 identified and unidentified users. To see the list of identified users, Click here.

Forum map
Bestofmedia Forum ©
2000-2009 Bestofmedia Group
Page generated in 0.521 seconds
Please mind

You are about to answer a thread that has been inactive for more than 6 months.
If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.

Add a reply Cancel
Sponsored links
  • Ask the community now
  • Publish
Ad
Related Topics
See all relatives topics
They won a badge
Join us in greeting them
How do I win badges?