I am new to windows server 2008. PLease help me on the following:1. How To Force Adding Of Domain Admin Group to Local Admin Group? Our objectives follow: a. For the domain user/groups to be a local admin so that it can open quickbooks software. Quickbooks software runs only in local admin account. b. can a domain user also log-in to local computer (laptop) even if not networked? our laptops are always brought outside the office so it uses local (client) user. Thus it is impractical to control once the laptop is brought outside the office.2. can a user access multiple shared folders by just clicking one desktop icon? how? Which means such user can only view the folder he can access.

Hi,1. You can use Restricted Groups policy on Domain policy to add users to workstations' local group..a. To do so , please refer to the detailed steps below. b. A Domain user can log into a local computer even if its not networked if this Domain User has logged into this computer before. A cached credential on local computer would be used for this Domain user. 2. A user can access multiple shared folders by just clicking one Desktop icon. You can setup DFS to accomplish this task. For detailed information and instructions of DFS, please refer to the article below.DFS Step-by-Step Guide for Windows Server 2008http://technet.microsoft.com/en-us/library/cc732863.aspx You can always control the permissions of user when setting up shared folder, just right-click the shared folder, choose Properties, switch to Permission tab, edit the options according your plan. Add to clients local group.=========================1. Start Active Directory Users and Computers from any domain controller.2. Create an organizational unit, and then move all of the appropriate workstations and member servers to that organizational unit.3. Create a global group in that organizational unit, and then add the appropriate users to that group. 4. click Start, type "gpmc.msc", right-click the new OU, choose Create a new GPO and link here.5. Right-click the new GPO, choose Edit. 6. Right-click Restricted Groups (under Computer Configuration\Windows Settings\Security Settings\Restricted Groups), and then click Add Group.7. Type administrators and then click OK. 8. In the Members of this Group box, click ADD, and then click Browse.9. Locate the group in the organizational unit that you want to place in the administrators group, and then add it the group. After you do so, close the group policy.10. At a command prompt, type "gpupdate /force" (without the quotation marks), and then press ENTER.NOTE: This method will remove the users/groups which are individually added to local administrators group from workstation.Thank.