Make an Active Directory User an Local Administrtor

[Steve]

How can I make an Active Directory user have Administrator privileges
locally on an XP Pro client machine. If the user logs on to the AD network
he does not have the privileges to install software on the local machine or
use the Windows Update site. I'd like to make this user have administrator
privileges on the local machine. I can't seem to find where or how to
change this persons local rights. If I log on as Administrator to the local
machine or the network I don't see this user listed under users? I know
this is a simple task? Anyone willing to share their knowledge?

TIA
Steve

 

[Steven L Umbach]

Add their domain account to the local administrators group on their computer if that
is what you really want. You can assign/publish .msi packages so that a regular user
can install authorized software and also configure Windows Update to install
automatically be schedule possibly using a Software Update Services computer on your
lan where you can authorize updates before they can be installed. --- Steve

 

[Steve]

Steve,

Could you tell me exactly how to add their domain account to the local
administrators group on their computer? I thought I could do it by logging
on as the local administrator and then going to control panel - users but I
don't see their domain account listed?

 

[Steven L Umbach]

If the machine is properly joined to the domain logon as a local administrator and
use lusrmgr.msc to open local computers and groups. Then go to the local
administrators group and select add and you should have a choice to select the domain
where you will have to browse to the user you want to add or try adding the user as
domain name\user as in mydoman\user1. --- Steve