Hi, This works for me ,you can try. After join computer to domain then log on to Windows Xp with local administrator account and go to control panel -> addusers (select account from your domain) -> Grant access level to your domain account as "Administrator". Or you can use "net" command to do this. Open a cmd shell, then execute: C:\> net localgroup administrators /add MYDOMAIN\tom Regards, Tom samba-bounces+hypermonk=hotmail.com@lists.samba.org on behalf of steve wrote:> New to this windows domain stuff, sorry ( at my age learning new stuff > can take a while ). > > I've set up a domain and joined a couple of XP workstations to is and > all is fine. What I want to do now is to ensure that the users of these > PCs still have administrative rights on their PC's. > > Can anyone show me the basics / point me to a good guide on how to do > this??? > > TIA, > > Steve > > -- > Steve Holdoway <steve@greengecko.co.nz> > http://www.greengecko.co.nz <http://www.greengecko.co.nz/> > MSN: steve@greengecko.co.nz > GPG Fingerprint = B337 828D 03E1 4F11 CB90 853C C8AB AF04 EF68 52E0 >
On Fri, Jul 10, 2009 at 2:18 AM, suphakit@gmx.com<suphakit@gmx.com> wrote:> Hi, > This works for me ,you can try. > > After join computer to domain ?then log on to Windows Xp with local > administrator account and go to control panel -> addusers (select > account from your domain) -> Grant access level to your domain account > as "Administrator". >That's the admin nightmare :-) If you have 500 computers to admin, how do you remove Tom's admin rights? The best way is: - Create a new domain group. - Add users to new domain group. - Add this new domain group to the local administrators group on each machine. Now, every user in "new domain group" will have admin rights in the computers. If for some reason you think John Doe does not need admin rights anymore, you just remove him from the "new domain group"