Best way to give active directory users full permissions to local

[ctiowa]

I am looking for comments on the easiest/best way to give users either full or MORE permissions to their local box. I am running a 2000 AD environment with XP clients and want users to be able to have more control of their local machine. Services, etc.

Thanks,

Rich

 

[GrnEyedLdy]

You can add their domain account to the local SAM. Put them into Local Admin or Local Power Users depending on how much local control you want to give them.

 

[ctiowa]

So as an example just go into the LOCAL administrators group and add the domain_user.domain.mfst (or whatever account)?

Thanks !

Rich