Roaming Profiles & Admin Rights?

[Ryan]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Hi,

Just wondering if someone could help, we currently run a small business
Network
with one Windows 2000 server on a domain. We have setup romaing profile
paths for all users on the server and shared the user profiles directories
etc. Problem is we have a lot of users move around the office but when they
come to use another pc with there logon details it logs in ok with all their
shortcuts etc but it only gives the users standard permissions to that
machine. Most of the time they need to do other stuff that requires admin
rights on the local machine, the only way we have got round it is to add the
user to the machine manually and setting admin rights. Is there anyway we can
automatically do this?

Hope it makes sense
Thanks

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

If you really want to set up users so they ALL have admin sights on all
machines (Not a very good idea). You can use restricted groups within a
gpo.

This allows you to set up domain group and force it to place this group in
ALL machines local admin account.

http://support.microsoft.com/default.aspx?scid=kb;en-us;320045

http://support.microsoft.com/default.aspx?scid=kb;en-us;228496

--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.
"Ryan" <Ryan@discussions.microsoft.com> wrote in message
news:1A8B63F5-B6E8-4EF4-9E43-C026751074C4@microsoft.com...
> Hi,
>
> Just wondering if someone could help, we currently run a small business
> Network
> with one Windows 2000 server on a domain. We have setup romaing profile
> paths for all users on the server and shared the user profiles directories
> etc. Problem is we have a lot of users move around the office but when
> they
> come to use another pc with there logon details it logs in ok with all
> their
> shortcuts etc but it only gives the users standard permissions to that
> machine. Most of the time they need to do other stuff that requires admin
> rights on the local machine, the only way we have got round it is to add
> the
> user to the machine manually and setting admin rights. Is there anyway we
> can
> automatically do this?
>
> Hope it makes sense
> Thanks
>