Hello,
I hope someone can help in my situation. I have windows 2012 Active Directory and windows 7 clients.
I need to add domain user to the local admin group for computer that they own. each user should have local admin rights for his machine only. so if a domain users logins to other machine they should not have admin privilege. its each user to his computer only.
I thought about creating OU for each computer and then assign group policy (Computer Configuration > Preferences > Control Panel Settings > Local User and Groups ) but this would mean if I have 200 computer then I would need to create 200 OU and 200 policies which is a bad design. I could be wrong in thinking this scenario.
Any other suggestions to make this simple ? script or group policy setting that I'm not aware of.
Thank you
Asad