XP Client join 2003 domain which local group need to join?

Posted on 2006-05-11
Last Modified: 2010-04-18
Hi all:

we have a lot XP Pro client join to 2003 domain,when users login to domain access local disk will appear access deny message,we add domain user to local administrator group that work find,but we found user can change local computer setting,how to prevent it happen?
is this a good idea to add domian user to local administrator group?
should I add domain users to other local group(like power user)?

Question by:darkeryu
    LVL 48

    Expert Comment

    LVL 20

    Accepted Solution

    It is NOT a good idea EVER to add the DOMAIN USER Group to the LOCAL ADMIN GROUP. Add only the particaulr user otherwise you get what you just described.
    You should only ad a SPECIFIC USER ot a group when possible. Adding any DOMINA USER to the powergroup will give ALL DOMAIN USERS the ability to have POWERUSER on all machines. Is that what you want?
    If not just ad the particular user to the POWER USER group.

    Jay_Jay70, why bust his chops for posting that here. It does have some legitmacy in Server 2003 since it's part of the domain. He may not know that it should be in MS Network, but its not a big deal. He's obviously not a native english speaker and problem does not see the difference.

    LVL 20

    Expert Comment

    Sorry.. JAY JAY... I see what you meant.. He obviously just does not understand... and I'm a bit of a DOLT as well.. LOL
    LVL 48

    Expert Comment

    thats ok, i was just wondering why it was reposted when the same answer was already given

    no stress

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    Join & Write a Comment

    Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
    ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now