admin rights

[Guest]

We currently have 450 users in our domain. We have profiles setup where if a
user logs into any PC in the office, they will see their default drive
mappings etc.

One thing users cant do is install programs and run PCanywhere unless they
log off, logon as adminsitrator locally and go to user accounts and add their
user name as an admin, then log back in.

Question, how can i give a user admin rights on every PC to install software
etc without having to add them on every PC locally?

 

[Lanwench [MVP - Exchange]]

In

We currently have 450 users in our domain. We have profiles setup
where if a user logs into any PC in the office, they will see their
default drive mappings etc.

One thing users cant do is install programs and run PCanywhere unless
they log off, logon as adminsitrator locally and go to user accounts
and add their user name as an admin, then log back in.

Question, how can i give a user admin rights on every PC to install
software etc without having to add them on every PC locally?

Hi - I replied in another group. Please don't multipost - if you need to
post to multiple groups, it's best to crosspost instead, by posting a single
message to a handful of relevant groups (separate the NG names with commas)
so that everyone can follow the thread. Thanks

 

[Bruce Chambers]

We currently have 450 users in our domain. We have profiles setup where if a
user logs into any PC in the office, they will see their default drive
mappings etc.

One thing users cant do is install programs and run PCanywhere unless they
log off, logon as adminsitrator locally and go to user accounts and add their
user name as an admin, then log back in.

Question, how can i give a user admin rights on every PC to install software
etc without having to add them on every PC locally?

Well, if your domain administrator wants his network's security so
badly compromised, he'll know how to do it using a login script on the
domain controller to via group policy.


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell

 

[Harry Johnston]

Well, if your domain administrator wants his network's security so
badly compromised, he'll know how to do it using a login script on the
domain controller to via group policy.

This won't work - login scripts run in the user's context.

Kingme, I would recommend that you avoid doing this if possible, as performing
everyday tasks with an administrator account is very dangerous. However, if you
really must, add the "Domain Users" group to the Administrators group on each PC.

If you've got a lot of PCs you could use a startup script with the following
command:

net localgroup Administrators /add "Domain Users"

Harry.