join AD user to XP workstation Admin group

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hello friends, how can I make an Windows 2003 AD user a member of XP
workstation local Admins group. By default AD users don't have access to
many features on the xp machine. Is there a group policy setting that would
accomplish this task?

Thanks much.
 
Manual: Right-click My Computer > select Manage > expand Local Users and
Groups > Groups > Add the user to the Administrators group.

Automatic: www.joeware.net
Check out the free win32 pages and look for LG. It allows remote
modification to localgroups via script.

--
Todd J Heron, MCSE
Windows Server 2003/2000/NT; CCA
----------------------------------------------------------------------------
This posting is provided "as is" with no warranties and confers no rights

<eldingo> wrote in message Hello friends, how can I make an Windows 2003 AD user a member of XP
workstation local Admins group. By default AD users don't have access to
many features on the xp machine. Is there a group policy setting that would
accomplish this task?

Thanks much.
 
I believe the OP was talking about doing a domain logon on the workstation.
Sounds like the domain GPO settings are keeping the user from doing certain
actions. Even if you add the userid and pw to the local admin group, that
userid is a local userid with it's own profile. AFAIK, this will have zero
effect if they do a domain logon...
 
eldingo said:
Hello friends, how can I make an Windows 2003 AD user a member of XP
workstation local Admins group. By default AD users don't have access to
many features on the xp machine. Is there a group policy setting that would
accomplish this task?
Click to expand...

You are searching the "restricted groups" inside a GPO.
There you can replace the actual local admins (which takes efect
even on the domain admin) or you can add them and the original
mappings are not involved.

Mark
 
Hi Mark, Danke schöne for your help

Mark Heitbrink said:
You are searching the "restricted groups" inside a GPO.
There you can replace the actual local admins (which takes efect
even on the domain admin) or you can add them and the original
mappings are not involved.

Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
W2K FAQ : http://w2k-faq.ebend.de
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.
Click to expand...
 
Back
Top