This may make me sound like a total e*tard, but I need to make 1 or 2 people in 17 buildings local administrators for all of the windows 2000 professional workstations. This is to allow them to install software, printers, etc. because I can't be everywhere at once. I do not want them to be domain admins or have any administrative privileges on the servers (installing software is about all that they can do). My plan is to create a global group for them and add that group to all of the local machine's administrator group, but what is the best way to accomplish this? I am planning on using "net localgroup /add" in a GP startup script, but is there an easier way? 
Facebook
Twitter