admin rights active dirctory computers


  • Hi Team,

    how do i enable domain users should have local client computer admin right,...?

    20 domain user need there local computer admin rights to run exe,

    please help how can i configure it through gpo.

    Regards, Kumar.V

    Wednesday, June 13, 2012 8:56 AM


  • Hello,

    restricted groups are the way touse here

    Be aware that allowing domain users to be local admin is a security risk and should be avoided where ever possible to prevent you from AV/Malware and also not legal/licensed software on company machines.

    Best regards

    Meinolf Weber
    Microsoft MVP - Directory Services
    My Blog:

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Wednesday, June 13, 2012 9:07 AM