RE: Remove domain user from local administrators group

From: Morosan, Bogdan (Bogdan.Morosan_at_rompetrol.com)
Date: 10/12/04

  • Next message: Thomas Shokes: "RE: Remove domain user from local administrators group" 
    Date: Tue, 12 Oct 2004 20:33:26 +0300
To: "chang zhu" <cyz2000@yahoo.com>, <focus-ms@securityfocus.com>

    You can use Restricted Groups policy to control group membership.

    http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs
    /en-us/sag_scerestrictgroups.mspx

    Bogi

    > -----Original Message-----
    > From: chang zhu [mailto:cyz2000@yahoo.com]
    > Sent: Tuesday, October 12, 2004 6:17 PM
    > To: focus-ms@securityfocus.com
    > Subject: Remove domain user from local administrators group
    >
    > Hi,all
    >
    > I just went to this new company and found out that
    > each domain user is assigned to local administrators
    > group.
    >
    > We need to remove domain user from local
    > administrators group. Is there any MS utility that
    > allows to do this instead of going to each workstation
    >
    > to remove and assign them to Power Users group?
    >
    > The environment is Win2K and XP.
    >
    > Thanks always,
    >
    > Chang
    >
    > __________________________________________________
    > Do You Yahoo!?
    > Tired of spam? Yahoo! Mail has the best spam protection around
    > http://mail.yahoo.com
    >
    > --------------------------------------------------------------
    > -------------
    > --------------------------------------------------------------
    > -------------
    >
    >
    >

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Thomas Shokes: "RE: Remove domain user from local administrators group"

    Relevant Pages

    • Re: Prevent user to install software
      ... >member of the computer's local Administrators group how ... >domain user account could be prevented from installing ... If your domain user account object is a member ... >assuming that you are trying to install software and are ...
      (microsoft.public.win2000.group_policy)
    • Re: Admin right for station
      ... You can simply add their domain user account to the local administrators ... >I would love to know how to give my users admin right to their own station. ...
      (microsoft.public.windowsxp.security_admin)
    • RE: Assign Applications
      ... the local administrators group,so please check the local administrators ... membership to see if the domain user is there. ... In SBS Server, while join a client computer to domain, we use the ... client computer and select to join them to the local administrator group on ...
      (microsoft.public.windows.server.sbs)
    • RE: Assign Applications
      ... the local administrators group,so please check the local administrators ... membership to see if the domain user is there. ... In SBS Server, while join a client computer to domain, we use the ... client computer and select to join them to the local administrator group on ...
      (microsoft.public.windows.server.sbs)
    • Remove domain user from local administrators group
      ... each domain user is assigned to local administrators ... We need to remove domain user from local ... Do You Yahoo!? ... Mail has the best spam protection around ...
      (Focus-Microsoft)