Guest mcp6453 Posted October 29, 2007 Posted October 29, 2007 Our server is Windows Server 2003. The work stations are XP SP2. After we join a machine to the domain, we give the user administrative rights on the local machine. At least I think we do as I am confused. While logged into the domain as administrator, we open User Accounts (Start | Run "control userpasswords2") | Advanced | Advanced and add "Domain Users" to the Administrators group. My colleague tells me that's not the way to do it. He says he does not go into the Advanced panels. When the User Accounts window first opens, he clicks on Add... and then adds the individual user as an Administrator. This morning I looked at a computer that is similarly configured and is maintained by a staff of true IT people. It seems that my colleague is more correct in that there is an entry for the local user at the appropriate domain. Therefore, I would appreciate knowing the correct way to cause any properly logged on user to have local admin rights on a workstation.
Guest Meinolf Weber Posted October 29, 2007 Posted October 29, 2007 Re: Adding Users Hello mcp6453, In a domain configuring domain users as local administrator you can use the Restricted groups feature. But why should normal user have admin rights? It will make more problem for the admins then it helps the user. Most software runs without being local admin and it also prevents you from unauthorized software. http://www.windowsecurity.com/articles/Using-Restricted-Groups.html Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm > Our server is Windows Server 2003. The work stations are XP SP2. After > we join a machine to the domain, we give the user administrative > rights on the local machine. At least I think we do as I am confused. > > While logged into the domain as administrator, we open User Accounts > (Start | Run "control userpasswords2") | Advanced | Advanced and add > "Domain Users" to the Administrators group. My colleague tells me > that's not the way to do it. He says he does not go into the Advanced > panels. When the User Accounts window first opens, he clicks on Add... > and then adds the individual user as an Administrator. > > This morning I looked at a computer that is similarly configured and > is maintained by a staff of true IT people. It seems that my colleague > is more correct in that there is an entry for the local user at the > appropriate domain. Therefore, I would appreciate knowing the correct > way to cause any properly logged on user to have local admin rights on > a workstation. >
Recommended Posts