Local Admin Rights - add / remove ?

Question

Is there a way to add and remove local admin rights for users at logon / logoff in Server 2008?
Workstations are XP sp3 and Windows 7 Sp1.  We have users who move from computer to computer and they need local admin access but we would prefer to not have Domain Users have local admin rights to all PCs.

Answer 1

Hi,
As far as I can see we can add user to local admin group at logon, but the user should relogon to get the membership, and if we also remove the user from local admin at logoff, then this equal to do nothing.
To add a domain user to a single computer as local administrator using GPO, I would like to suggest you go through the below similar threads:
Use GPO to add a single admin user to only one computer on the domain.
http://nerddrivel.wordpress.com/2013/05/24/use-gpo-to-add-a-single-admin-user-to-only-one-computer-on-the-domain/
How do I add a domain user to a single computer as local administrator using GPO
http://social.technet.microsoft.com/Forums/en-US/0a3eda5c-28ef-418e-a13d-f47fe0bf1bc3/how-do-i-add-a-domain-user-to-a-single-computer-as-local-administrator-using-gpo
Granting Local admin rights via Group Policy to a particular computer
http://social.technet.microsoft.com/Forums/windowsserver/en-US/4ceff330-0b72-4ed2-a55a-3089b504d2fc/granting-local-admin-rights-via-group-policy-to-a-particular-computer?forum=winserverGP
Hope this helps.
Regards, Yan Li