Create a group policy to make certain Domain Users, Power Users
We have some 200+ computers in the organization. I want help desk support to be able to perform basic maintenance on these computers but have no ability to make changes in active directory. How can I give them LOCAL Administrator or Power user status on domain computers without making them Domain Admins. I can use the Domain Controller to add the help desk group to power user or administrator groups on the computers but I will have to do that individually for each computer for each computer. Is there a more efficient way to accomplish this?
We are using Windows Server 2003 on domain controller and most of the computers have Windows XP pro installed.
No. The only way you can do this is individually, unless you set up a global network for the computers to connect too and give each person a user account with the respective abilities you wish to give the individual users.