Giving users LAN access but retain Administrator privileges

I would like users to be able to log on to their computer, gaining access to LAN resources, and still have Administrator privileges over the local machine. The Primary Domain Controller (PDC) is NT Server 4.0. The local workstations are either NT 4.0WS, 98SE, or 2000Pro.Assuming they have full permission on their local machine, and whatever access on the LAN I assign them, I don't care whether they actually log into the domain or the local machine.

The simplest way to do this for the NT4 and Windows 2000 desktops is to make the Authenticated Users group a member...

of the local Administrators group. The Windows 98 desktops have no local security. You can add this group at the desktop via a quick command-line entry: net localgroup "authenticated users" /add You'll need administrator privileges on the local machine to run this command.

This was first published in February 2001

Dig Deeper



Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.



Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:









  • Virtual desktop security guide

    To secure virtual desktops, consider antivirus, certificates and network vulnerabilities. Just remember, VDI doesn't always ...

  • Guide to low-cost desktop virtualization

    In this guide, learn to virtualize desktops without spending more than you would when deploying PCs, and what VDI vendors are ...

  • VDI pilot project guide

    A VDI pilot project should start with a VDI project plan. Know what pitfalls to avoid and test product options to achieve a ...