Solved

Need to make users local admins of their workstations SBS2008

Posted on 2011-03-03
5
816 Views
Last Modified: 2012-05-11
Hey there, We have an SBS2008 with 20 computers.  I cannot add users to the domain admins or administrators group on the server, or it will mess up their Blackberry sync.  I need to make the users able to install to their local machines, which means to me local admin rights.

On SBS2008 is there a way to allow this in GPO?

Thank you
0
Comment
Question by:bcameron70
5 Comments
 
LVL 1

Expert Comment

by:directpointe
Comment Utility
Open Control Panel Panel>>Administrator Tools (you may need to open this as the admin on the local machine)>> Under administrators ad domain users
0
 
LVL 13

Accepted Solution

by:
connectex earned 500 total points
Comment Utility
While I'm a fan of the non-admin user. Here the proper way, SBS way of doing this task. In the SBS Console, click Users and Groups. On the users tab, double click the user name. It opens a new window. Click on computers. Highlight the computer and below pick the desired access level. Note that the rights will be progated by group policy as mentioned just below the access level drop down box.
0
 
LVL 2

Expert Comment

by:MoSBS
Comment Utility
Create a custom GPO in your MyBussiness .. Computers .. SBSComputers using Group Policy Management (This would make sure that it changes only the workstations). Edit the policy you create and go to 'Computer Configuration' ..'Policies'.. 'Windows Settings'.. 'Restricted Groups' right click and select Add Group .. Type Administrators. Once created, double click the group and add the Domain Users group.

THis will add the Domain Users group to each computers local administrator's group. You can test it by typing GPupdate on a workstation and checking the group memeberships.
0
 
LVL 77

Expert Comment

by:Rob Williams
Comment Utility
Restricted Groups in Group Policy is specifically for adding administrators to local machines. The following outlines the process, but be carefully using it. If you apply it to an OU that holds your admin account it it possible to lock your self out.
http://www.windowsecurity.com/articles/Using-Restricted-Groups.html
0
 
LVL 13

Expert Comment

by:connectex
Comment Utility
I just want to point out my posting is how the SBS team designed the product to work. I know it's not the fastest method but it's guaranteed not to be overwritten by another method like setting up your own GPO.
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Small Business Server 2011. NOTE: This guide has been written using the preview version of SBS2011 therefore some of the screens may …
Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now