Local Admin

From: Paul (pwk_1_at_yahoo.co.uk)
Date: 08/06/03 

Date: Wed, 6 Aug 2003 09:35:38 -0700

I am currently setting up delegation of administrative
control at my workplace. I am doing this to cut down on
the number of people that are in the Domain admins group
that don't need to be.

The problem I have, is some of the people that need to be
removed from the default Domain admins group need to have
privileges to install software on users local machines
when there on jobs.

We have 1000 + computer and we are running Windows 2000
with Active Directory in a Mixed mode.

I don't want to have to add them to the local admins group
on each machine, as I would be there next Christmas with
1000+ computers. And if I could avoid them having to log
on locally each time as administrator that would be good.

So I was wondering if someone knows of an easy way of
doing this without giving to much administrative control,
or keeping them in the Default Domain Administrators group.

Any advice would be good advice

Thanks

Paul

Relevant Pages

  • Re: Remote Site MDW Problems
    ... > administrator account, put it into the Admins group and removed ... Putting someone into the local Admins group allows them to do ... I setup the developer workgroup file ... I then created the site administrator workgroup file, ...
    (microsoft.public.access.security)
  • Re: Access 2000 Permissions
    ... Check of permissions indicates UserID ... >> Administrator does NOT have authority to change design ... which is a user in the Admins Group. ...
    (microsoft.public.access.security)
  • RE: User group tool
    ... Here is a Perl script that will find users in the local admins group ... other than the Administrator and Domain Admins.. ... print OUTFILE "Local Administrators Audit\n"; ...
    (Pen-Test)
  • Re: Securing Database
    ... Did you create a new Administrator user when you secured the database? ... > But when i delete admin from admins group, am not able to perfrom any ... >>> I have created user rights through User level security wizard. ...
    (microsoft.public.access.security)
  • Re: Remote Site MDW Problems
    ... > I then created the site administrator workgroup file, ... that the Admins group of wgf-site, is not the same as the Admins group ... > administrator account, put it into the Admins group and removed the Admin ...
    (microsoft.public.access.security)
Loading