AD User Rights on Local Machine

From: Jason (jakai@gibsonconsulting.com)
Date: 01/17/03 

From: "Jason" <jakai@gibsonconsulting.com>
Date: Fri, 17 Jan 2003 11:47:00 -0800

You can manage machines on your network by right clicking
on My Computer, choose "Manage" and then right click on
Computer Management (local) and choose "Connect to another
computer."

I don't think you can set a policy that makes everyone an
admin or power user on their local machines, however if
the machine is in the AD and I re-image the machine and
give it the same name, the Admin rights are automatically
loaded (Administrator, Domain Admin, and the user are
listed as Admins), as long as I don't dump the machine
from the AD in the process.

>-----Original Message-----
>the problem that i am having is when any user logs onto a
>windows 2000 machine they can't run all the programs..
>(they don't have the correct rights) the only thing that
>works is making them part of the domain admin group. Now
>i know i don't want to do this..but its the only thing
>that works.. is there any way to assign them local admin
>rights without doing it on the local machine? (within
>Active Directory?).. If i do have to add them as Power
>Users or Admins on the Local Machine is there a way of
>adding them to that group using a policy instead of
>visiting each machine. Plus differnt people access
>differnt machines. so it would be very hard to keep up
>with adding each person by hand to the power users group
>whenever they logged onto a differnt machine.
>
>Any help or suggestions would be
>very apreacited.. if you need any more info feel free to
>email me
>
>cdersham@chemungcanal.com
>
>Thanks
>
>Chris
>
>.
>

Relevant Pages