RE: Remove domain user from local administrators group

From: Depp, Dennis M. (deppdm_at_ornl.gov)
Date: 10/12/04

  • Next message: vic brown: "Re: Can we really block users from installing applications through Group policy?"
    Date: Tue, 12 Oct 2004 13:02:01 -0400
    To: chang zhu <cyz2000@yahoo.com>, focus-ms@securityfocus.com
    
    

    If you are using Active Directory, you can look at using restricted
    groups. Also there is a command line utility in the resource kit call
    cusrmgr that will allow you to add and remove users from local groups on
    a remote computer. There is also the psexec utility forom Sysinternals.
    This would allow you to open a command prompt on a remote box and run
    command line calls from there.

    Dennis

    > -----Original Message-----
    > From: chang zhu [mailto:cyz2000@yahoo.com]
    > Sent: Tuesday, October 12, 2004 11:17 AM
    > To: focus-ms@securityfocus.com
    > Subject: Remove domain user from local administrators group
    >
    > Hi,all
    >
    > I just went to this new company and found out that
    > each domain user is assigned to local administrators
    > group.
    >
    > We need to remove domain user from local
    > administrators group. Is there any MS utility that
    > allows to do this instead of going to each workstation
    >
    > to remove and assign them to Power Users group?
    >
    > The environment is Win2K and XP.
    >
    > Thanks always,
    >
    > Chang
    >
    > __________________________________________________
    > Do You Yahoo!?
    > Tired of spam? Yahoo! Mail has the best spam protection around
    > http://mail.yahoo.com
    >
    > --------------------------------------------------------------
    > -------------
    > --------------------------------------------------------------
    > -------------
    >
    >

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------


  • Next message: vic brown: "Re: Can we really block users from installing applications through Group policy?"

    Relevant Pages

    • RE: Remove domain user from local administrators group
      ... Remove domain user from local administrators group ... > Do You Yahoo!? ... Mail has the best spam protection around ...
      (Focus-Microsoft)
    • RE: Remove domain user from local administrators group
      ... Remove domain user from local administrators group ... Mail has the best spam protection around ...
      (Focus-Microsoft)
    • Remove domain user from local administrators group
      ... each domain user is assigned to local administrators ... We need to remove domain user from local ... Do You Yahoo!? ... Mail has the best spam protection around ...
      (Focus-Microsoft)
    • Re: Prevent user to install software
      ... >member of the computer's local Administrators group how ... >domain user account could be prevented from installing ... If your domain user account object is a member ... >assuming that you are trying to install software and are ...
      (microsoft.public.win2000.group_policy)
    • Re: Admin right for station
      ... You can simply add their domain user account to the local administrators ... >I would love to know how to give my users admin right to their own station. ...
      (microsoft.public.windowsxp.security_admin)