AD User Rights on Local Machine

From: Chris Dersham (cdersham@chemungcanal.com)
Date: 01/17/03 

From: "Chris Dersham" <cdersham@chemungcanal.com>
Date: Fri, 17 Jan 2003 09:01:03 -0800

the problem that i am having is when any user logs onto a
windows 2000 machine they can't run all the programs..
(they don't have the correct rights) the only thing that
works is making them part of the domain admin group. Now
i know i don't want to do this..but its the only thing
that works.. is there any way to assign them local admin
rights without doing it on the local machine? (within
Active Directory?).. If i do have to add them as Power
Users or Admins on the Local Machine is there a way of
adding them to that group using a policy instead of
visiting each machine. Plus differnt people access
differnt machines. so it would be very hard to keep up
with adding each person by hand to the power users group
whenever they logged onto a differnt machine.

Any help or suggestions would be
very apreacited.. if you need any more info feel free to
email me

cdersham@chemungcanal.com

Thanks

Chris

Relevant Pages

  • Re: Newbie question on User Priveleges
    ... The problems on the client are broad: We added an existing a machine (from ... > make the user a local admin on the machine...not a domain admin ... > We've recently stood up SBS2003 in a small and standard configuration. ... > local machine) where the database resides. ...
    (microsoft.public.windows.server.sbs)
  • Re: local users and groups
    ... The copying of the local account is possible as is the use of a boot disk ... you mentioned an Accounts Operator group on the local machine? ... >> we then made him a power user and reset the admin password ...
    (microsoft.public.win2000.general)
  • Re: exdeploy dsscopescan problem
    ... Since you said you can add the account to ... > includes the exchange server i cannot connect to via exdeploy ... > service admin rights to all exchange site and configuration levels and to ... > usrmgr on the local machine, the account in the administrators group says ...
    (microsoft.public.exchange.setup)
  • Re: exdeploy dsscopescan problem
    ... it is a small lab testing setup so it is very simple - one wins dns server ... resolve machine names and domain names backwards and forwards and, ... >> service admin rights to all exchange site and configuration levels and to ... >> usrmgr on the local machine, the account in the administrators group says ...
    (microsoft.public.exchange.setup)
  • Re: Javascript problem after installing SP2
    ... > The admin site of my website is setup so that when I add a new product, ... > can browse to a photo on my local hard drive to upload. ... If you are affected by local machine lockdown ...
    (microsoft.public.windowsxp.general)