Re: Windows2000 Domain - Security on Local Machine.

From: Nick Coons (ncoons_at_red7usa.com)
Date: 06/20/03 

Date: 19 Jun 2003 15:46:06 -0700

> > So I'd like to know what I'm missing. I'd like to be able to figure
> > out what it is that allows the Administrators group the ability to
> > install software, so I can assign that same right, or set of rights,
> > to the Users group.. so I don't have to give every user full
> > Administrative rights.

> Making a user member of the local Administrators-group doesn't give him/her
> administratorrights on the domain. So no problem here.

On most of the workstations, if not all, the user does not exist on
the local machine. Do I need to create the user on the local machine,
or can I add the domain user to the local Administrators group? Or,
instead of having to add each user, can I add the domain Users group
to the local Administrators group?

I don't actually have any of these workstations in front of me now,
otherwise I'd simply try this without having to post a follow-up :-).

Relevant Pages

  • Re: Scripting questions
    ... which is a member of the local Administrators group on computer "WST101". ... Bind to the local administrators group on the remote computer and use the ...
    (microsoft.public.windows.server.scripting)
  • Re: Local PC administration
    ... object to the local Administrators group on each PC. ... Administrators group on each Domain PC. ... Workstation Admins) a member. ...
    (microsoft.public.win2000.active_directory)
  • Infopath not responding
    ... If the domain user is not in a administrators group on the local machine ... Prev by Date: ...
    (microsoft.public.sharepoint.portalserver)
  • Re: restricted groups for local admin rights
    ... > user to the local administrators group on that computer. ... >> First off be sure to use Restricted Groups at the Organizational Unit ... >>> I have read several articles on how to do it but it is confusing to me. ...
    (microsoft.public.windows.group_policy)
  • Re: Win 2003 Local Admin Problem
    ... You should have defined a built-in Administrators group as a restricted ... I added the local administrators group on my PC. ... Windows Server - Directory Services ... >>>> You can use Restricted Groups feature of the GP to add Domain Admins ...
    (microsoft.public.windows.group_policy)