Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've been searching online for sometime trying to figure out how to do this, and I keep getting contradictory instructions. How to give a roaming user account the install privilege on Windows Server 2003 through GPO?

share|improve this question
@Erica: For server/administration questions you should ask on our sister site, There should be a lot more people there who can help you. – Bill the Lizard Jul 8 '09 at 19:11
Can you clarify the question? Add an example or two showing what you want to achieve. – ThatGraemeGuy Jul 8 '09 at 20:53

You can create a Restricted Group via GPO that can add your interns to the Local Administrators group on each workstation.

share|improve this answer
My answer was a response to Speckles "answer". I hope I didn't cause any confusion. – joeqwerty Oct 29 '09 at 3:24
@Speckles - Go with what Joeqwerty is suggesting. You want to research and use Restricted Groups via GPO. Be careful though because there are 2 portions to this. One portion allows you to control and replace who is in the Administrators groups on the local workstations (and member servers) and the other allows you to merge and add groups to the local Administrators group. What you want to do is to create a domain group called helpdesk or interns and make this group a member of the local Administrators group on the workstations. Then add your intern accounts to this group. It works great. – Kevin Garber Nov 14 '09 at 14:44

Your question is not clear but from it I think you may be referring to Terminal Server users. In such a case it would be preferable to set the permissions locally on the TS server, rather than using GPOs.

share|improve this answer

Sorry for taking so long to respond.

I'm trying to figure out how to configure what amounts to an intern account, which would let interns log on to any user's computer and do basic maintenance. Currently the admin has to come along each time to type in his password; as one of the interns in question this is fairly aggravating. The admin has been trying to fix this, but so far has not been successful.

Currently, I'm somewhat excluded from this effort, which unfortunately makes it difficult for me to give more detail. So I trying to figure out where the f'ing manual is on how to do this so I can get involved. At this point I'm not even sure what term I should be googling, and coming to the admin with newbie suggestions hasn't gotten me anywhere.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.