Administrative Privilages...

So you want some thing between a full administrator and a normal user. A limited administrator if I can say. My info is a little bit outdated, but I hope it will fit.

On your client machines, go to [Control Panel] -> [Administrative Tools] -> [Computer Management] -> [Local users and groups] -> [Groups]. Here is a list of all local security groups. Say you have a domain group called "limited administrators" and you want that group to be able to back up your client machines. So you need to add this group (limited administrators) inside the local "Backup Operators" group. If you want the "limited administrators" to have "Power Users" privileges. you need to add the "limited administrators" group inside the local "Power Users" group.

Experts in this, please correct me if I'm wrong.

Hi,
thank you solo...
Right now we have 100 systems. its not difficult to enter into all the systems. but if anyone having 1000 system, what the position. It is not possible to enter in all systems.
If possible plz check why its happening.

Thanku...

Even if you are in a domain environment, each client machine is still subject to the permissions applied in the local settings that S0lo just directed you towards, including adjusting the system time. On a side note, computers that are on the domain should keep the same time as the Domain Controller (DC), otherwise you will receive errors logging into the domain. If you are dealing with multiple time zones, you should have DC's in each time zone and set to a site so that the computers at that site will use that DC.

Well you definitely don't want everyone in your organization to have administrator privileges; granularity is key in implementing security.
As far as applying any changes to the local security settings in a large environment, these can be pushed out to all machines in a domain environment via Group Policy. Take a look at articles.techrepublic.com.com/5100-10878_11-5089397.html .