Solved

New user/personal computer

Posted on 2004-04-02
5
214 Views
Last Modified: 2013-11-15
Dear Experts,

I have some new users to my network.  They have brought there own computers to the company.  When they log in to the network their computers are given the rights assigned to them by the domain. (domain users)

I want them to log into the domain but have full control over their computers.  

Can anyone help me with this issue?

I appreciate the time.

Reggie
0
Comment
Question by:ReggieM
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 32

Expert Comment

by:LucF
ID: 10742716
Hi ReggieM,

Make sure their useraccounts have "local" administrative rights.

Greetings,

LucF
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 10742816
To clarify - make their domain account part of the local Administrators...
User Manager (start->run->usrmgr)
or start->run->lusrmgr.msc
to do this...(what OS?)
0
 
LVL 11

Accepted Solution

by:
YohanShminge earned 250 total points
ID: 10742821
Are they logging on with domain accounts or local accounts?  If they're using domain accounts, just add their domain account/group to the local Administrators group.  To see who currently has administrative priveledges on the local machine, open the command prompt and type:

net localgroup "Administrators"

To add an account or domain group to this local group, type:

net localgroup "Administrators" "AccountName" /add
0
 
LVL 11

Expert Comment

by:PennGwyn
ID: 10743216
It was a few years back, but I remember making a login script that would add the domain Administrators group to the Local Administrators group whenever anyone logged into the domain.  (Had a problem with some users trying to use the domain but lock out the domain admins....)

It shouldn't be *too* much harder to add the account logging in, although ideally you'd want to do it only for those users and only when logging in on their personal machines.  There's probably a slick Group Policy way to do that.

0
 
LVL 11

Expert Comment

by:YohanShminge
ID: 10743882
Group policies probably would take care of it, but check out this recent question pertaining to setting the local group via login script:  http://www.experts-exchange.com/Networking/Q_20925959.html
0

Featured Post

Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question