Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

local admin access defined from domain server

Posted on 2002-04-02
6
Medium Priority
?
156 Views
Last Modified: 2010-04-13
Is there a way to assign local admin privilleges to users (for example install programs, configure system) using a policy on the domain controller. This is to save having to visit each machine and add local administrator privilleges for each user. I want all domain users to be able to administrate all computers on the domain except the domain controller and not to have domain admin privilleges.

Any ideas?

Thanks
0
Comment
Question by:wiffen
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 17

Assisted Solution

by:mikecr
mikecr earned 375 total points
ID: 6913307
Go into group policy and under both Computer Configuration and User Configuration under Administrative Templates\Windows Components\Windows installer, enable "Always install with elevated privlidges" and this will allow users to install programs without getting denied access.
0
 

Author Comment

by:wiffen
ID: 6913441
Thanks for you comment. I looking for full administrator privilleges, not just install privilleges. So they could do things like add new users to local machines.
0
 
LVL 5

Accepted Solution

by:
matt023 earned 375 total points
ID: 6913986
I don't think there's way to do it within Win2k itself.
However, you can write a script based on the cusrmgr.exe utility found in the Resource Kit to accomplish what you're trying to do.  You can write a script and run it using a domain admin account, and it will add Domain Users into each PC's local admin group.
0
Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

 
LVL 18

Expert Comment

by:JConchie
ID: 8701434
No comment has been added lately, so it's time to clean up this TA.
I will leave a recommendation in the Cleanup topic area that this question is:


Split between mikecr and matt023@lc

Please leave any comments here within the next seven days.

PLEASE DO NOT ACCEPT THIS COMMENT AS AN ANSWER!

JConchie
EE Cleanup Volunteer
0
 

Expert Comment

by:YensidMod
ID: 8754280
Per recommendation.

YensidMod
EE Moderator
0
 

Expert Comment

by:dj_humpyg
ID: 9266282
You can do it through group policy.

Computer config - Windows Settings - Security settings - Restricted groups

Just add a group in there, 'Administrators' and then add 'Domain users' to that group, by going in to the properties of 'Administrators'.

When users log in, the group policy will be applied and everyone will be local admin.
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Let's take a look into the basics of ransomware—how it spreads, how it can hurt us, and why a disaster recovery plan is important.
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…
Is your data getting by on basic protection measures? In today’s climate of debilitating malware and ransomware—like WannaCry—that may not be enough. You need to establish more than basics, like a recovery plan that protects both data and endpoints.…

597 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question