Active Directory question

[retrofade]

I'm looking for a way to get all my users setup to be local administrator on their PCs. All my users are in the Domain Users group. I have another group that I'd like to get them all into called Domain Power Users, but I'm not able to add Domain Users to that container, nor am I able to make Domain Users a member of Domain Power Users. Preferably I'd like a way to do it without manually placing everyone in there.

Any Suggestions?

[Abe Froman]

You can select (highlight) multiple users, and the right click and choose "add to group".

As far as local admin, that's per machine. That's why it's called LOCAL admin. Sounds like you've got an application or permission not set up for domain users correctly.

[SkyDog]

The easiest way would be to add the Domain Users group to each machine's local Administrators group. Like Abe pointed out, that's a local group on each machine -- meaning you'd need to change that setting on each computer, not in Active Directory.

You don't have to go around to each computer, though. You can use the Computer Management app on one computer to access each of the other computers and change their group memberships. Right-click My Computer and select Manage to open Computer Management. Then right-click "Computer Management (Local)" and select "Connect to Another Computer...". Enter each workstation's name or IP address to connect to it so you can manage its local users and groups.

Or if you have a problem using Computer Management, there's always Remote Desktop.