Client Administrative Rights on a domain

G

Guest

I am a Net admin for a company with about 40 users. We are running a windows
2000 active directory with user accounts.

I have been upgrading all of the OS's on the network from various different
OS's including Windows XP home and Windows Media Center to Windows XP pro in
order to get all the users on the our domain.

My question is in regard to the client administrative rights. Alot of the
software we run require admin rights for selective parts of each. As it
stands now, users are having to log ou of their user account and into the
administrative account on the local machine to install or run specific
programs. Is there a way to give users administrative rights on each desktop
machine, but within their user accounts on the domain. I have gone through
and assigned full control rights etc to these users, but with failed results.
I also assigned multiple groups and assigned users into those, without
success.

Any help would be appreciated.
 
G

Guest

it sounds to me like the user account from the domain is not added to local
administrators group. go into computer management and add the domain account
to the local admin group.
 
B

Bruce Chambers

lidarmap said:
I am a Net admin for a company with about 40 users. We are running a windows
2000 active directory with user accounts.

I have been upgrading all of the OS's on the network from various different
OS's including Windows XP home and Windows Media Center to Windows XP pro in
order to get all the users on the our domain.

My question is in regard to the client administrative rights. Alot of the
software we run require admin rights for selective parts of each. As it
stands now, users are having to log ou of their user account and into the
administrative account on the local machine to install or run specific
programs. Is there a way to give users administrative rights on each desktop
machine, but within their user accounts on the domain. I have gone through
and assigned full control rights etc to these users, but with failed results.
I also assigned multiple groups and assigned users into those, without
success.

Any help would be appreciated.


Why not simply add each user's domain account to the local
Administrators group? (Oh, and then you'll want to think about
increasing your IT Help Desk staffing, as you'll need more people to
repair the damage all of these local administrators are likely to cause.)

--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Is life so dear or peace so sweet as to be purchased at the price of
chains and slavery? .... I know not what course others may take, but as
for me, give me liberty, or give me death! -Patrick Henry
 
G

Guest

isn't that what i said?

Bruce Chambers said:
Why not simply add each user's domain account to the local
Administrators group? (Oh, and then you'll want to think about
increasing your IT Help Desk staffing, as you'll need more people to
repair the damage all of these local administrators are likely to cause.)

--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Is life so dear or peace so sweet as to be purchased at the price of
chains and slavery? .... I know not what course others may take, but as
for me, give me liberty, or give me death! -Patrick Henry
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top