loss of administration rights on workstation

[Brandon]

I have an XP workstation that is part of a AD domain. I
want users (who are part of the administrator domain
group) who logon to this workstation to have admin
rights. I have followed the instructions on several docs
about creating a new organisational unit and applying
rights to it but this does not work.

Any suggestions?

 

[Steven L Umbach]

I am not sure what your problem is, but the domain admins group is by default added
to the local administrators group of every machine added to the domain. You should be
adding users who you want to administer the domain to the domain admins group instead
of the administrators group. If you were using delegation for the OU, that will not
impart local administrator rights on a domain computer. Restricted groups could be
used to accomplish such, but you should not need to do that for the domain admins
group. --- Steve