Question : Microsoft, Server, 2003, Group Policy--How to allow all users to install software

I want to allow all users in the domain to be able to install and uninstall software, devices and drivers, and fully control their systems.  Basically i want everyone to be a local admin for the machines, but they just can't mess with server settings, and group policy and ad information.  How can i accomplish this in group policy

Answer : Microsoft, Server, 2003, Group Policy--How to allow all users to install software

By using Restricted Groups in Group Policy, you can add a domain group such as Domain Users into the local Administrators group of each workstation in a particular OU.  

Understand the ramifications of that statement - every single user in your environment will be an administrator on every single workstation in your environment.

If this is what you want, create an OU containing all of your workstations, then create a GPO using Restricted Groups as described here: http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

If you only want the primary user of a particular computer to be a local admin on that computer, rather than configuring a group to be local admins, you'll need to do this individually on each workstations rather than through Group Policy.