Can't set local admin rights on domain

[Mark Bennett]

I have a Windows XP pro workstations that is logging on
to a Windows 2000 domain. The users were set with domain
user rights when first setup, this don't allow them admin
rights on local machine. Now I have purchased a new
software package that requires users to have admin rights
on the local machine. I can't figure out how to change
this. Help.

Thanks,

Mark

 

[David Jones]

On each XP machine, using a local administrator account
(or domain admin):

Open Control Panel->Administrative Tools->Computer
Management, expand local users and groups, click groups.
Double-click Administrators, click Add, and add the
domain account(s) or group(s) you want to have local
admin rights on the machine.

You have two options if you need to do this on lots of
machines - either give the user of the machine the local
Admin password and have them add their domain accounts to
the local admin group, or you can break the machines into
OU's in the domain, and push out a group policy setting
the accounts or groups.

 

[Roger Abell]

Making daily use account admins is a last resort action.
Most applications can be made to run as a limited user.
Reviewing posts in this newsgroup, or a google search,
will show recipes for tweaking permissions so users
can run apps posted multiple times per week.