Re: Admin right for station

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 11/23/05 

Date: Wed, 23 Nov 2005 14:18:12 -0600

You can simply add their domain user account to the local administrators
group on their domain workstation to make them administrators on their
workstation. However you seem to have found a way to give the users access
to the applications they need by modifying NTFS/registry permissions which
is much preferable in my opinion to making them local administrator. You can
use Group Policy to manage NTFS and registry permissions if need be but I
would do that only at the Organizational Unit for computer accounts you want
to apply the settings to. Look under computer configuration/Windows
settings/security settings for file system and registry. Be sure you test
out changes on a couple test computers first to make sure everything works
as planned. Changes made by file system and registry remaineven if the Group
Policy that implemented them are unlinked. --- Steve

"Crown Royal" <CrownRoyal@discussions.microsoft.com> wrote in message
news:B6684539-1CC8-4DE0-B6B9-80785DF6436D@microsoft.com...
>I would love to know how to give my users admin right to their own station.
> The only thing that has worked for me is to go to the station and change
> the
> security settings on both the C drive and the registry. They are logging
> on
> to a domain, so it's taking the domain user persmissions. I tried giving
> them administrator rights on their account, but I guess it doesn't mean
> local
> admin rights. Some sofware that they are running needs them to be
> adminstrators of their own station, and going to each to edit the rights
> on
> the station is ridiculous. I've tried going around to the group policies,
> but can't seem to find out how to change the policy to make it work.
>
> Thx

Relevant Pages

  • Re: Domain Account Keeps Disappearing from XP Local Administrators
    ... I enabled auditing - Account Management in the local security policy of one ... of the computers. ... I added back the domain user acct to local Administrators ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restricted User info
    ... I would create a new domain user account or testing. ... Meinolf Weber ... Restricted Groups policy in the workstation local administrators ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM SP1 on Win2K3 SP1
    ... Assuming SSL on ADAM is working fine and i want to use antoher domain user account as the ADAM service account. ... Do i only need to grant that account READ permission to machine keys and use dsdbutil to change the ADAM service account? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Workaround for 0x8007045A (!)
    ... works if you log on to the administrator account of a workstation attached to ... in a fit of social conscience that might help other WU5 ... domain account under previous versions of SBS were now missing. ... on as domain user and WU5 doesn't work. ...
    (microsoft.public.windowsupdate)
  • Re: ADMTv2 questions
    ... > account to another one. ... > resourses which only the source domain user has permission. ... > The content of SID mapping file should be like below. ... The ACEs for the OLDDOMAIN domain will be preserved. ...
    (microsoft.public.windows.server.migration)