On Apr 25, 2005, at 11:53 AM, Douglas, Dora wrote:
I'd like to force this to happen..
In my lab environment I use a management product that resets the OS
and
applications to the original state. I want each user to
authenticate to
Active Directory and have admin rights at the local machine level.
It's not a problem to have each user authenticate, but I can't figure
out how to give them local admin rights. They can't be network
admins,
but it's ok for them to be local admins. Anyone else tried this? I
created a user account with local admin rights, then copied it to the
default user template. Everyone who logs in after that gets the
appropriate applications, dock, etc, but not local admin rights.
I'm using 10.2.8 in a MS enterprise network.
You can make a MacAdmin group or what not in AD. Put the users in it
and then tell the AD plugin to allow those users as local admins.
