Re: Domain user local rights
From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 03/10/05
- Next message: Javier J: "Re: Deny _WRITE_ access to a file"
- Previous message: Steven L Umbach: "Re: hisecweb.inf"
- In reply to: Curt V: "Domain user local rights"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 10 Mar 2005 14:41:45 -0600
You need to add that domain users account to the local administrators group
for the domain computers. That can be done with a Group Policy startup
script and the net localgroup command or with Group Policy Restricted Groups
where you can create a global group for such purpose and the domain users to
that global group. The use Restricted Groups and the "member of" [for SP4]
option to make it a member of administrators group. You must do such at the
Organizational Unit level because if you do it at the domain level then that
group will be a member of the administrators group for the domain.
Restricted Groups can be found under computer configuration/Windows
settings/security settings. The link below explains more. --- Steve
http://www.windowsecurity.com/articles/Using-Restricted-Groups.html
"Curt V" <CurtV@discussions.microsoft.com> wrote in message
news:1B082530-8D8F-49EC-B39E-9B65F68DED1E@microsoft.com...
> Is there a way to give a Domain User Admin rights to all PC's on the
> network?
- Next message: Javier J: "Re: Deny _WRITE_ access to a file"
- Previous message: Steven L Umbach: "Re: hisecweb.inf"
- In reply to: Curt V: "Domain user local rights"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
