I have a small NT network which consists of one PDC and several NT4/Win2000 workstations. I have created several user accounts on the PDC and these users are all domain users who have been assigned limited access rights to network resource. My problem is, when these users log onto the domain from their NT4/Win2000 workstations, they don't have full access rights (i.e. administrator rights) to their workstations! How do I let all of my domain users to have administrator rights for their NT4/Win2000 workstations?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
In User Manager For Domains, select their computer as the domain. Then add their domain account to the Administrators group on their computer. What the previous poster said will work too of course, but I doubt you want every one of your users to have these rights since they'll be hosing up their machines all the time.
For some software it might be sufficient, but for many packages it's not.
I don't know of how many users we are talking, but if there are only a few, it may be less work to install this SW yourself than doing a troubleshooting after users have screwed up the system. And if there's a lot of them, you might consider of a SW distribution package like MS SMS or CA's ShipIT. That's my point of view, I want to know what's on the PCs in my network.
:o) dong..., and everybody else.
PLEASE READ THIS CAREFULLY:
You must NEVER NEVER grant a Domain User Group membership of the Local Admin Group on each workstation.
And You must NEVER grant the same Domain User membership of the Local Admin Group on more than his/hers own workstation
If You grant Everyone membership of the Local Admin Group, Everyone gets unlimited REMOTE access power of every workstation on Your network.
The unlimited REMOTE access involves:
1. Explorer: \\ComputerName\C$
2. Registry
3. Computer Management (Control Panel)
IF YOU WANT TO KNOW MORE ABOUT THIS ISSUE:
http://www.experts-exchang
http://www.tryware.dk/Engl
http://www.microsoft.com/t
http://support.microsoft.c
IF YOU WANT TO TEST IT:
You have to grant Everyone to the local admin group on BOTH test-workstations, and logout and logon again.
Important: You have to make a new logon after creating the credentials, because they are given in W2k in the second where You press ENTER to password when logging on.
Please reply, when You have removed Everyone again!
Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark
Business Accounts
Answer for Membership
by: steinmtoPosted on 2001-04-04 at 20:03:29ID: 5988233
Add the domain users global group to the local administrators group on each workstation.
Hope this helps,
Tom