Comments on: Local Administrator Rights http://itknowledgeexchange.techtarget.com/itanswers/local-administrator-rights/ Wed, 19 Jun 2013 08:25:58 +0000 hourly 1 By: craigfox http://itknowledgeexchange.techtarget.com/itanswers/local-administrator-rights/#comment-39517 craigfox Thu, 25 Aug 2005 10:25:57 +0000 #comment-39517 First Question:
What OS is installed on the laptops?
Second Question:
Do users log on to the laptops, while in the field, as their domain user all the time?

Assuming the answers are XP, AD, and domain accounts there are several ways you can solve your problem.

1) add their domain accounts to the local administrators group. This can be done manually or using a GPO with restricted groups.
2) either manually, through the local security policy, or with a GPO set the number of logons allowed before they need to contact a domain controller to something appropriate. The default is 10. Maybe the number should be around 60 if they are gone for several months.

Additional notes.
1) the idea of using a group “field SEs” is a good one… do it!!
2) local user accounts are hard to administer and confusing for users. Avoid them if possible.
3) resitricted groups will replace all other entries in the local group so give it some thought first and verify the scope of the GPO before you implement it.

Good Luck

]]> By: goofdru http://itknowledgeexchange.techtarget.com/itanswers/local-administrator-rights/#comment-39518 goofdru Thu, 25 Aug 2005 07:48:00 +0000 #comment-39518 Thank you all for your comments. That was a huge help. I knew how to do it I just haven’t done it in a long time. Thank you.

]]> By: cptrelentless http://itknowledgeexchange.techtarget.com/itanswers/local-administrator-rights/#comment-39519 cptrelentless Thu, 25 Aug 2005 06:58:26 +0000 #comment-39519 Or use a group called Field Supps or something on the domain, add that to the local administrators, and add the domain account to field supps. That way you don’t have to fiddle with the laptops ever again.

]]>