Group Policy

[atari37]

Where in AD's GPO do I grand domain users admin rights on any workstation they log onto?

[fizban2]

what you would is create a global group that you can add the all the admin group on evey machine, then add all the users to that global group

[eyeball]

another way to do this is to create restricted groups, although i would agree with fizban2, his method is the best

thanks

[atari37]

what you would is create a global group that you can add the all the admin group on evey machine, then add all the users to that global group

I'm a little confused (what else is new).

- Create a global group in AD

- Make all workstations a member of this group?

- Add the users to the global group as well?

Please clarify.

[fizban2]

create a global security group in AD, add all users to that Security group, then through group policy or via logon script you can add the group to the administrators group on each machine

[atari37]

create a global security group in AD, add all users to that Security group, then through group policy or via logon script you can add the group to the administrators group on each machine

Got it! Thanks....

Anyone know of a script out there I can use?