So what I am looking to do is be able to add single domain user to be a local administrator of his/her workstation and only his/her workstation
Windows Server 2008 domain, Windows 7 Enterprise workstations.
Currently use Restricted Groups GPO to set mydomain\Domain Admins, Administrator and mydomain\Support Staff as local admins on all workstations.
I need to be able to add mydomain\JoeUser as a local admin of his workstation and mydomain/JaneUser as a local admin of her workstation but not vice versa. I do not want JoeUser to be an admin of JaneUser's workstation or any other workstation on the domain.
Any ideas on how I can do this effectively without having to create a new OU and GPO for each workstation that I need to assign a single local admin to?
Thank you in advance