Okay so um, yeah. I want a certain number of users to be Admins of all the workstations and just "Users" to the servers and the DC's. So, I removed them from the Domain Admins group since I heard its "unsecure", created a restricted group in the Group Policy called "Administrators", added the Domain Admin group otherwise the Domain Admins won't be administrators anymore and I added the Group that should be Admins of the Local Computer, BUT!!!! The Users are still ADMINS TO THE DOMAIN!!!! How do I set a user group as Admins ONLY to the workstations, BUT, just users to the server and domain? Kute Punk Kay Pee Kay Tee Pren Tiss Kute Punk Kay Pee Kay Tee Pren Tiss

I suspect you've got more wrong with your users and groups than you realize. Personally, I wouldn't have named your new group "Administrators" as there is already a group named that on the DC. This might be what's causing your problem. If it were me, I'd call the group something easily identified for what it is. Something like "PC_Admin" or "Local_Admin" or something like that. Then I would add the appropriate users to that groupe and finally, I would add that group to the 'Local Administrators' group on each workstation. You'll want to check to ensure that none of the users still have membership in the Domain Admin's group either explicitly (per user) or via membership in another group that's in the Domain Admin's group. Not to be rude Kaytee but if I were you I would get a few books on administering windows domains and if at possible, get some training too.

Ditto That. Life's more painless for the brainless.