Domain Accounts

Posted on 2013-10-25
Medium Priority
Last Modified: 2013-10-25
Does anyone have a good website to define the different user accounts with active directory and their permission levels?

Also I want to add a new user and give him local administrative rights to all desktops within the domain but no admin rights to the domain itself currently.  What type of user would I need to configure?
Question by:mgerwelAF
  • 2

Expert Comment

ID: 39600144
I usually create a global group in AD called Workstation Admins.  The Workstation Admins group is a member of the Administrators group on each workstation.  You can leverage group policy's restricted group feature or preferences Local User and group to make this happen automatically.  I would recommend using the Preference option.


Author Comment

ID: 39600147
So would the users within the group 'Workstation Admins' be just regular users?

Accepted Solution

vmdude earned 2000 total points
ID: 39600164
Yes the users in the workstation admins group mentioned above would be just regular AD users. As long as the group is set to be Local Administrators on the computers (can be achieved via group policy) then thats all you need. No special AD permission required/

Author Closing Comment

ID: 39600189
Thanks for the info

Featured Post

Easily Design & Build Your Next Website

Squarespace’s all-in-one platform gives you everything you need to express yourself creatively online, whether it is with a domain, website, or online store. Get started with your free trial today, and when ready, take 10% off your first purchase with offer code 'EXPERTS'.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
The article explains the process to deploy a Self-Service password reset portal I developed a few years ago. Hopefully, it will prove useful to someone.  Any comments, bug reports etc. are welcome...
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question