Local Admin Rights

[Ben Blackmore]

Hi
We are setting up some laptops on win2k pro, and they need to have local
admin rights, so the users can change the power settings and things. However
if you set the local account to have admin rights, when they login to the
domain with their username they are still not given local admin. How would
you add this? We've tried adding "Administrators our.domain/Builtin" but
this still does not give local admin rights. Someone said we should add
"Domain Admin our.domain/Users" but this would allow them to administer the
domain surely, which we don't want them to do. Which group do we add them
to? Just so they have local admin rights to their PC.

Cheers

Ben

 

[Matjaz Ladava [MVP]]

You must put your domain users to local Admin group on their computers.

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000), MVP
(e-mail address removed)
http://ladava.com

 

[Ben Blackmore]

Ah I see, works!
Cheers
Ben

Add their domain account to the local administrators group on their
machine. -- Steve

 

[Eric Burke [MSFT]]

Hi Ben,

If your laptops are a member of the domain, you can just use the Restricted
Groups group policy to add the users to the Administrators group. Please
keep in mind that if you don't have sp4 installed, then you will also need
to add the Domain Admins group because without sp4 or the Restricted groups
hotfix, it will replace what groups are already there. Reference article
320045 and 810076.