Domain Local Admins - Does not have admin rights

[dhoward_westexetc]

We have a problem with PCs with Windows XP Service Pack 3.

Teacher's are set with Local Admin rights on ADUC, which gives them the right to install programs and set some screensaver settings. This happened correctly under XP SP2. But under SP3 they no longer have these rights and hence cannot install programs, it comes up with Administrator rights are needed.

I have tried the loopback processing method and this does not work, the same problem recurrs.

Has anyone has this problem under SP3 and know a way to fix this?

[srochford]

If you want a group to be local admins on a machine I would do it with the "restricted groups" bit of group policy - computer config | windows settings | restricted groups.

Add the group "administrators" and change the "members of this group" bit to include (eg) staff to add the staff group to local admins.

[dhoward_westexetc]

Thanks for the reply. I followed the steps you outlined and that worked a treat. Thanks a lot!