Re: administrator rights for computer

From: Danny Sanders (Danny.Sanders_at_NO-SPAMcpcmed.org)
Date: 08/23/05 

Date: Tue, 23 Aug 2005 13:05:49 -0600

You can not add a user to the domain admin group from their computer. There
is no domain admin group on their computer. To add them to the domain admin
group you have to do that on the server.

Adding their domain account to the local administrator group will result in
the user logging on with their domain account and being administrator of the
local computer.

hth
DDS W 2k MVP MCSE

"Sher" <Sher@discussions.microsoft.com> wrote in message
news:85287DBA-3B61-4381-802B-831478E29CBA@microsoft.com...
> Hi Danny,
> If I do this, then the domain user is added as the administrator of the
> domain also which I do not want. I only want the domain user to have
> local
> administrator rights.
> Sher
>
> "Danny Sanders" wrote:
>
>> Add their domain account to the local administrator group of their
>> computer.
>>
>> Use users and groups on their computer, select the Administrator group
>> and
>> add their domain account to that group by selecting their name from the
>> list
>> of domain users (not local users).
>>
>>
>>
>>
>> hth
>> DDS W 2k MVP MCSE
>>
>> "Sher" <Sher@discussions.microsoft.com> wrote in message
>> news:E352FA92-4BC5-43B4-AC75-14741297B406@microsoft.com...
>> > Hi all,
>> > I have a normal user who logs on to a 2003 server network which has
>> > group
>> > policies set.
>> > I have a program that requires administrator rights to the workstation
>> > in
>> > order to run.
>> > If I assign adminstrator rights to the domain user at the workstation
>> > level
>> > (user accounts)then the user also has administrartor rights to the
>> > domain.
>> > How can I assign workstation administrator rights to the domain user
>> > but
>> > not
>> > domain administrator rights?
>> > I want this user to get all the gp's set.
>> > Thanks in advance for any help
>> > Sher
>>
>>
>>

Relevant Pages

  • Limit domain login to Administrator Group
    ... winxp computers as part of the domain. ... each user is a part of their local administrator group on ... localuser2 can not login ...
    (microsoft.public.win2000.group_policy)
  • Listing Users that are Part of the Local Administrator Group
    ... I'm trying to find/write a script that can return the members of the Local ... Administrator group on Win 2K/XP machines. ... lists the computers in my domain with the Domain users that belong to those ... can't figure out how to pull the users from the local administrator group. ...
    (microsoft.public.scripting.vbscript)
  • Re: Listing Users that are Part of the Local Administrator Group
    ... I have an active directory 2003 domain environment and basically want to be able to generate a text file that lists the computers in my domain with the Domain users that belong to those computers' local Administrator group. ... Very new to Windows scripting, and I can't figure out how to pull the users from the local administrator group. ... fOutFile.WriteLine vbCrlF & "Other accounts:" fOutFile.WriteLine sOthers fOutFile.Close ...
    (microsoft.public.scripting.vbscript)
  • Re: Administrator
    ... domain admin group has to be added ... > to the local administrator group for each server. ...
    (microsoft.public.sharepoint.portalserver)
  • Error in removing users from local admin group
    ... I went through the number of scripts you posted for removing the user ... from local administrator group. ... userdomain = WshNetwork.UserDomain ...
    (microsoft.public.scripting.vbscript)