You can also use a startup script to add the user to the local admins
group. Assuming you are running W2k or better.
Denny
_____
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bruce Clingaman
Sent: Thursday, December 04, 2003 11:09 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir]
You could add him to the local administrators group using the
computer management tool | connect to another computer. The addusers.exe
can add users to local groups using the cmd or batch file.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Jerry Johnson
Sent: Thursday, December 04, 2003 9:50 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir]
I guess it is kinda funny now that I think about it.
I would not mind if the domain user in question was a
member of all the clients local admin group but I do not know of a way
to accomplish this without visiting each desktop.
Jerry
Scicom Data Services
Minnetonka,Mn
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Douglas M. Long
Sent: Thursday, December 04, 2003 9:32 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir]
I hope that last comment was a joke...as I wouldnt want
a "user" to have domain admin rights. If you find a good solution for
this, I would be suprised, as I have looked for a better solution than
just adding the users domain account to the local admin group and cant
find anything. I have been living with all "domain users" being members
of their local machine admin group, and just hoping that they dont
change the local admin user password. If all you are worried about is
keeping the admin password so that you can get into the machine if you
need...dont worry, there are always local machine administrator reset
programs.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Jerry Johnson
Sent: Thursday, December 04, 2003 9:46 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir]
Hi
I have a user that needs to be able to install
software on 2k and xp clients by visiting each desktop.
All of our clients are setup with the same local
admin password and do not want him to know that password.
Is this possible?
He is currently just a domain user.
Thank you
Jerry
Scicom Data Services
Minnetonka,Mn
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
