I'm running Windows Server 2003 and I am about to be creating 1012 users in my Active Directory domain. I need these user to have local Administrator rights on their computer but not be able to log in to the server. I thought about the builtin\Administrators
group but when I tried that out on a test account they were able to log in to the server. Is there a group I can add them to to do this? If not is it possible to create a group and give it the privileges I need? That way I could just create standard users
and add them to that group.
↧