Security rights problem, W2K network

[bkonner]

Howdy,

I am having a problem granting users administrative rights on Windows XP Professional clients. I do not want all groups to have administrator rights on the Windows XP client, just certain groups. Specifically, the group is not able to change power options in screen savers. I do not think there is a conflict in how I configured the group's policy (but I will check). The group I am having the problem with is called faculty. I want them to have administrative rights on the local WXP computer. In the organizational Unit's group policy in Security Settings, Restricted Groups, I added the Administrators's group, then I added the faculty group to "Members of this group". This change did not allow the faculty group to change local settings on the W-XP Pro client. I should add that I block policy inheritance.

Any clues?

Thanks!

 

[wolluf]

Are you trying to give local rights (administrator) to a domain group?

You can't do this by just running something on the server.

Suggest using a batch file running psexec (freeware - part of pstools from

http://www.sysinternals.com)

for each machine in domain (running net localgroup on said machine to add this group to local Administrators).