Hello, I have some client programs, that need local admin rights. I there a way to create a group in the ad to have local admin rights without domains admin rights ?