-----Original Message-----
Isn't there a way to add a user from the domain level to a "local admin" so
that when the user logs onto a computer, they would have local admin rights?
.
Nathan,
Yes, but I would be very careful about doing this! I do
everything possible to avoid this situation. Too many
times I have seen users delete the FONTS folder or delete
important folders/files because their hard drive is
getting full and they "needed more room to download
music/porn". Also, they are able to install AOL IM or
those annoying HOTBAR-type applications that will
typically bring their systems to a crawl.
If their domain user account is a member of the computer's
Power Users local group would this suffice? They can
install printers, install some software, etc. but are
still locked out of a lot of those "dangerous" folders.
Anyway, if you still want to do this ( It is not for me to
tell you how to run your environment and I would not be so
presumptuous as to do so! However, if you do decide to do
this I have two words for you: have fun! I speak from a
ton of experience on this one! ) look at "Restricted
Users" in Group Policy.
HTH,
Cary
