Dear All, Thanks in advance, I would like to give local IT guy as a local admin rights to install the software's in all the domain users system. Kindly advise on this please.Thanks & Regards, S.Sheshank

Dear All, As the title says, i am wanting to give some Domain Users local admin rights to the computers they log on to. I was thinking about group policy, but I'm not exactly sure what to change or add to be able to give certain users admin rights to the machine. I have googled it, but i can not seem to find anything to help me. I know it can be done manually, by going to each machine one by one and adding the user to the computer as an administrator, but i was hoping that someone out there could tell me a way of doing it. BTW before i forget i am using windows 2008 R2 server. Any help would be greatly appreciated Thanks & Regards, S.Sheshank

You need to use Restricted Groups group policy setting: http://technet.microsoft.com/en-us/library/cc756802(WS.10).aspxMy weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com Windows PKI reference: on TechNet wiki

Dear Vadmins, Thanks for reply, I would like to give permission to the local IT guy for the installation of the end user systems & but he will be domain user only.Thanks & Regards, S.Sheshank

then you have to use Restricted Groups. In the GP editor you must specify local group name (Administrators) and specify it's members (your IT guy) and link the GPO to an OU which contains end user systems (where the group membership must be effective). My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com Windows PKI reference: on TechNet wiki

Hi Sheshank, Thank you for the post. Please follow guide below to set up Restricted Groups. (Administrators means local admin group) http://www.windowsecurity.com/articles/Using-Restricted-Groups.html Moreover, you could also achieve it via GPP--Local Users and Groups if your clients supported GPP CSE. http://blogs.technet.com/b/dougga/archive/2011/09/12/managing-client-machine-local-admin-rights.aspx http://www.grouppolicy.biz/2010/12/group-policy-preferences-prerequisites/ If there are more inquiries on this issue, please feel free to let us know. Regards Rick Tan TechNet Community Support

Dear Vadims, its done thanks for you supportThanks & Regards, S.Sheshank

Dear Rick Tan, Thanks for your precious suggestion, i have done & very i will post documentation also.Thanks & Regards, S.Sheshank