Local admin rights

[Joe]

I have a user who is using Windows XP and joined to a Server 2003 domain. I
want to give him local admin rights so he does not have issues loading
programs. I go to My Computer/Manage so forth until I get to the area where
I could add the user to the local administrator group, problem is, It says i
canot add him to the group. I was told someone else was playing around in
this area and messed it up where no matter what you cannot add anyone, even
if you are logged in as Administrator to the domain. Someone deleted the
admin rights out of the local box. Is there a way I can fix this or does the
OS need to be loaded again?? HELP.

 

[Lanwench [MVP - Exchange]]

I have a user who is using Windows XP and joined to a Server 2003
domain. I want to give him local admin rights so he does not have
issues loading programs. I go to My Computer/Manage so forth until I
get to the area where I could add the user to the local administrator
group, problem is, It says i canot add him to the group. I was told
someone else was playing around in this area and messed it up where
no matter what you cannot add anyone, even if you are logged in as
Administrator to the domain. Someone deleted the admin rights out of
the local box. Is there a way I can fix this or does the OS need to
be loaded again?? HELP.

Is the domain administrators group a member of the local administrators
group? If not, log in as the local admin and make it so.

However, I strongly discourage you from granting end users local admin
rights. They shouldn't be installing software or making system changes to
their workstations, either inadvertently or on purpose. Locking down
workstations will save your company a lot of admin time, effort, and cost,
in addition to helping keep your network secure.