none
admin rights active dirctory computers

    Question

  • Hi Team,

    how do i enable domain users should have local client computer admin right,...?

    20 domain user need there local computer admin rights to run exe,

    please help how can i configure it through gpo.


    Regards, Kumar.V

    Wednesday, June 13, 2012 8:56 AM

Answers

  • Hello,

    restricted groups are the way touse here http://www.frickelsoft.net/blog/?p=13

    Be aware that allowing domain users to be local admin is a security risk and should be avoided where ever possible to prevent you from AV/Malware and also not legal/licensed software on company machines.


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Wednesday, June 13, 2012 9:07 AM