Hi

I have set up a Domain with a set of computers and i want one of my user groups to be able to access the local %SYSTEMDRIVE% when logging in using their Domain Account to prevent the need for Local Admin access.

Is there a way to do this from the AD or am i forced to set up NTFS security settings on all machines?

And if there is a way, what is it?

A group policy, computer startup logon script utilising the 'cacls' command might be useful. Use with care tough because you dont want to go resetting permission on all the foders on your system drive.

That is ofcourse a solution, seems kinda excessive though, but i guess thats how it should be done.

Thanks