Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)
Hi!
How can this be accomplished:
On a WindowsXP workstation (SP1 or SP2), on a Windows NT 4.0 Server
(SP6.0a) domain, how can a user be set up to be a regular domain user on
the network, yet an administrator on the local workstation?
I know this should be easy, but I have tried many different iterations
of local and network usernames to no avail, the only way the local user
could have total control over the workstation (update registry, etc.),
was either to login to the local machine (not the domain) as an admin,
or temporarily make them a domain admin.
Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)
pawn wrote:
> Hi!
>
> How can this be accomplished:
>
> On a WindowsXP workstation (SP1 or SP2), on a Windows NT 4.0 Server
> (SP6.0a) domain, how can a user be set up to be a regular domain user
> on the network, yet an administrator on the local workstation?
>
> I know this should be easy, but I have tried many different iterations
> of local and network usernames to no avail, the only way the local
> user could have total control over the workstation (update registry,
> etc.), was either to login to the local machine (not the domain) as
> an admin, or temporarily make them a domain admin.
Give their domain user whatever rights you want on the network..
Make that domain user (domain group) a member of the local "administrators"
group on the Workstation.
(BTW - not recommended. Most users should not be administrators.)
The two are mutually exclusive (workstation privs and domain privs.)
--
>=- Shenan -=<
>=- MS MVP -=<
--
The information above is intended to assist you; however, it is
suggested you research for yourself before you take any advice - you
are the one ultimately responsible for your actions/problems/solutions.
Whenever possible, the advice will include the method/places used in
compiling the answer. Also, questions may have been asked to clarify
your situation OR to give you an idea of where to look - do not dismiss
them lightly.
You are about to answer a thread that has been inactive for more than 6 months. If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.