Using Group Policy to set local user rights

  • Thread starter Thread starter Scott
  • Start date Start date
S

Scott

Having a real problem and I hope someone can help.
Running a Native Windows 2000 domain with all users on XP
Pro machines and using roaming profiles. Problem is one
piece of software that we use requires that the user have
local administrator rights to the machine for the
software to work. Short of going to all 100+ machines
and adding them to the administrators group before they
roam, is there a group policy object that will do this?
We do not want them to have administrator rights to the
domain or network, only the machine that they happen to
be working at (which changes a lot of the time, thus
roaming profiles).

Thanks a LOT in advance,

Scott
 
Here is a simple way to do this, create a batch file to add using this
syntax:

net localgroup administrators "domainname"\domain users /add

"domainname" would be the actual name of the domain

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
 
If this doesn't do it for you use Restricted Groups:

228496 HOW TO: Use Restricted Groups in Windows 2000
http://support.microsoft.com/?id=228496

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
 
Back
Top