I have a windows server 2003 domain controller, and I want all of the users in a certain OU to have local administrator privileges on the client computers, so that they can install programs such as MS Office. Yes, I do know that the users already have the rights to install programs such as Chrome, and Fire Fox. I also know that the domain users can't add themselves to the local admin group.
I've read this post and I've tried both the logon and I've tried the Restricted Group trick via a GPO, and sadly neither one has worked.
All of the client computers have the same local username and password that is a member of the local admin group (in my case it's superuser). Is there a logon script out there that can add the domain users to the local admin group using the superuser account and password?
I am also looking to upgrade the windows server 2003 to 2008, is there a new GPO option that will allow me to do this?
Thanks in advance!
Bookmarks