Hi,
I have a number of local desktop engineers who normally install and update software on PC's (XP clients on WIN2000 AD Network). I do not want to give them domain admin access. I would like to either assign them with delegated rights so that they can log in to PC's and install/update software.
Is assigning delegated rights a good idea and if so how do I do this.
Or shall I give make them members of the local administrators group on the PC's again if so how do I achieve this via Group Policies.
Or maybe there is a better option, please let me know.
Kachbo
I have a number of local desktop engineers who normally install and update software on PC's (XP clients on WIN2000 AD Network). I do not want to give them domain admin access. I would like to either assign them with delegated rights so that they can log in to PC's and install/update software.
Is assigning delegated rights a good idea and if so how do I do this.
Or shall I give make them members of the local administrators group on the PC's again if so how do I achieve this via Group Policies.
Or maybe there is a better option, please let me know.
Kachbo
