User with desktop admin rights but not server admin rights

User with desktop admin rights but not server admin rights

Post by QnJlbnQgSm » Sat, 27 Aug 2005 05:47:01


I would like to create a security group, that I can include users into, so
that these users can be on any workstation on the domain and install
software, but they cannot add users, or add computers to the domain without
an Administrators intervention. So I have four contractors coming in, they
will be touching each desktop and laptop on the domain to run updates and
remove and install software, but I don't want them to have access to the
servers, so no domain admin rights. How can I do this?

Thanks ahead of time.
 
 
 

User with desktop admin rights but not server admin rights

Post by Mark Dorme » Sat, 27 Aug 2005 07:26:46

They need to be members of a security group that is a member of the local
administraors group on each PC.

Run this on each machine "net localgroup Administrators
your_domain\Groupname /add"
or use
Use Restricted Groups in a GPO
http://www.yqcomputer.com/

--
Regards
Mark Dormer
How to ask a newsgroup question:
http://www.yqcomputer.com/

 
 
 

User with desktop admin rights but not server admin rights

Post by QnJlbnQgSm » Sun, 28 Aug 2005 00:47:12

I struggled with the group policy, but adding the net command to the logon
script worked perfectly. Thank you so much.