Domain user local rights

Archived from groups: microsoft.public.win2000.security (More info?)

Is there a way to give a Domain User Admin rights to all PC's on the network?
1 answer Last reply
More about domain user local rights
  1. Archived from groups: microsoft.public.win2000.security (More info?)

    You need to add that domain users account to the local administrators group
    for the domain computers. That can be done with a Group Policy startup
    script and the net localgroup command or with Group Policy Restricted Groups
    where you can create a global group for such purpose and the domain users to
    that global group. The use Restricted Groups and the "member of" [for SP4]
    option to make it a member of administrators group. You must do such at the
    Organizational Unit level because if you do it at the domain level then that
    group will be a member of the administrators group for the domain.
    Restricted Groups can be found under computer configuration/Windows
    settings/security settings. The link below explains more. --- Steve

    http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

    "Curt V" <CurtV@discussions.microsoft.com> wrote in message
    news:1B082530-8D8F-49EC-B39E-9B65F68DED1E@microsoft.com...
    > Is there a way to give a Domain User Admin rights to all PC's on the
    > network?
Ask a new question

Read More

Security Domain Microsoft Windows