We have some Win2K PCs in a non-secure environment, that we want to make the currently logged-on domain user a member of the local admin group so they can install software without a support call.

Is a kix logon script an appropriate way to accomplish this, or does someone have a better solution? Note that I *do* want to restrict across the network access to the PC, so simply adding Domain Users to local admins isn't an option. I just want whoever is physically at the PC, as long as they can authenticate to the domain, to be a local admin on that PC. Make sense I hope???

Thanks!!