Local admin install rights

[stjulian]

What is the preferred (MS approved) way to set up a domain user in active
directory to have local administrative rights to install programs on
different workstations in the domain? The domain is Windows 2000, so there
is only that granularity.

This user would not need to join the pc to the domain.

We want an AD user with LOCAL priviledges so it can be used on any station
at any time.


Julian

 

[Paul Bergson]

What you want is to use restricted groups in a gpo to force this user to be
a local admin on all workstationsyet it will provide no domain privleges.

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.