Domain user local rights

Archived from groups: microsoft.public.win2000.security (More info?)

You need to add that domain users account to the local administrators group
for the domain computers. That can be done with a Group Policy startup
script and the net localgroup command or with Group Policy Restricted Groups
where you can create a global group for such purpose and the domain users to
that global group. The use Restricted Groups and the "member of" [for SP4]
option to make it a member of administrators group. You must do such at the
Organizational Unit level because if you do it at the domain level then that
group will be a member of the administrators group for the domain.
Restricted Groups can be found under computer configuration/Windows
settings/security settings. The link below explains more. --- Steve

http://www.windowsecurity.com/arti [...] roups.html

"Curt V" <CurtV@discussions.microsoft.com> wrote in message
news:1B082530-8D8F-49EC-B39E-9B65F68DED1E@microsoft.com...
> Is there a way to give a Domain User Admin rights to all PC's on the
> network?