I have several Windows 7 machines joined to my domain. I created an account on the domain that is supposed to give local administrative access to the Windows 7 machines. For the most part it works, but for some tasks like adding a new driver for a printer or changing network settings, the access is not there. I set this up by using a group policy on the OU that the computers are in. Only Windows 7 computers are in this OU. The environment is a mix of Server 2003 and Server 2008, currently at the 2003 functinal level. Any help would be greatly appreciated.

Wouldn't your question be more appropriate in the Networkin forum?Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Rick is somewhat right in that this should go to Networking...because it has to do with AD and accounts...not necessarily networking hardware or configuration. If the account you created in the domain is not a DOMAIN ADMIN you won't by default have administrative rights on workstations. Where we are we add DOMAIN USER accounts to the LOCAL ADMINISTRATORS group via policy for specific users. You should make sure that the user account in question is added to the Local Administrators group on the workstation in question or workstations in question for this to work. Administrative rights are all or nothing so either you have the ability or you do not. Also remember that Windows 7 has User Account Control whereby you ELEVATE whatever process you're working on to the Administrator level without having to supply additional credentials. Hopefully this helps, r/ johnJohn Wildes | Senior Enterprise Architect | United Airlines | Desktop Engineering