Quote:

---

Are you suggesting that we add a pupil worstation account on each local machine? Give local admin rights. As I am interested in changing pupils domain passwords (or rather the teacher doing this) would this allow us to this?

---

yes but no.
you can add a account but again, you would need to elevate to that account.
what I ment, is make a domain group, or if you want to allow all teachers, you can add the teacher group to each wksta's local admin group.
this way, the account has the rights already.

now, what I originally suggested was that you add a group called something like wksta_admins and add that to each wksta's admin group.
then, add your teacher group to that group.

if you ever at later time want to remove the rights from all teachers, all you need to do is edit that wksta_admins group.