Re: Domain Users to have Local Admin rights
- From: "Roger Abell [MVP]" <mvpNoSpam@xxxxxxx>
- Date: Sat, 29 Apr 2006 03:32:14 -0700
As you are just now starting out on the Active Directory experience, and
your users are getting used to new things and ways of doing them . . .
I would strongly encourage you not to give out admin to the users.
Why do they need that ?
Do you comprehend the support effort that can, likely will, cause?
The last thing I want is lots of users running as admin on their box
all of the time. If there really is an unavoidable need for them to
be able to use admin authority, provide them with a separate
account (perhaps a machine local account) and also with guidance
on how it is only to be used when necessary.
Keep there day-to-day domain user account as a plain, limited
user account and you will be much better off in the long (and
short, as problems may crop up that fast) run.
"RedPenguin" <redpenguin@xxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1254qjd2uso6j84@xxxxxxxxxxxxxxxxxxxxx
Ok we recently installed Microsoft Server 2003 Enterprise Edition on our
PC. The whole domain is working and everyone has thier own login that
works. The only thing is, those users do not have local admin privledges
on the PCs they logon to.
We wish to have a handful of users, HelpDesk, that when they login to any
machine, they automatically get admin privledges on the workstation.
We tried playing with Group Policy Editor but nopthing at all will work.
.
- References:
- Domain Users to have Local Admin rights
- From: RedPenguin
- Domain Users to have Local Admin rights
- Prev by Date: Re: special permissions on folder don't work
- Next by Date: Re: Giving a device access to EFS (Encrypting File System)
- Previous by thread: Re: Domain Users to have Local Admin rights
- Next by thread: Giving a device access to EFS (Encrypting File System)
- Index(es):
Relevant Pages
|
|
