admin rights

[Guest]

We currently have 450 users in our domain. We have profiles setup where if a
user logs into any PC in the office, they will see their default drive
mappings etc.

One thing users cant do is install programs and run PCanywhere unless I log
off, logon as adminsitrator locally and go to user accounts and add their
user name as an admin, then log back in as that user.

Question, how can i give a user admin rights on every PC to install software
etc without having to add them on every PC locally?

 

[Lanwench [MVP - Exchange]]

In

We currently have 450 users in our domain. We have profiles setup
where if a user logs into any PC in the office, they will see their
default drive mappings etc.

One thing users cant do is install programs and run PCanywhere unless
I log off, logon as adminsitrator locally and go to user accounts and
add their user name as an admin, then log back in as that user.

Question, how can i give a user admin rights on every PC to install
software etc without having to add them on every PC locally?

Many ways, using group policy (restricted groups, or a computer startup
script with net user commands). Assign permissions to AD groups, not
individuals.

That said, why do you want this done in the first place, and why by the
individual users? You've got Remote Desktop & Remote Assistance builtin....
and if you absolutely want PCAnywhere (which I don't recommend), deploy it
via group policy as well. Users shouldn't run with admin rights, and users
shouldn't install software. You're opening yourself up to a lot of problems
if you do this. Just my $.02.

 

[Bruce Chambers]

We currently have 450 users in our domain. We have profiles setup where if a
user logs into any PC in the office, they will see their default drive
mappings etc.

One thing users cant do is install programs and run PCanywhere unless I log
off, logon as adminsitrator locally and go to user accounts and add their
user name as an admin, then log back in as that user.

Question, how can i give a user admin rights on every PC to install software
etc without having to add them on every PC locally?

Well, if your domain administrator wants his network's security so
badly compromised, he'll know how to do it using a login script on the
domain controller to via group policy.


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell