Changing default rights to users of network clients.

[dw_brooks]

I have reviewed options in group policy and don't see a
way to do this. I have a network with a mix of Windows
NT 4.0, Windows 2000 and Windows XP Clients.

I want to give my network clients administrative rights
to local workstations, but restrict those rights to
standard network user rights to other network resources.
(server files and directories, etc.) Does this require a
customized policy template?

 

[Steven L Umbach]

Add their domain administrator account to the local administrators group of
just their computers or a less secure option is to use "restricted groups"
at the OU level for those workstations to add the domain users group [or
other group you create] to the local administrators group for the computers
in just that OU and of course you would not want to have and servers in that
OU. That is the easiest way, but then users can access each other computers
as administrator either via local logon or via the network which is not a
good situation in my opinion. --- Steve

http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q320065