RE: Remove domain user from local administrators group

From: Morosan, Bogdan (Bogdan.Morosan_at_rompetrol.com)
Date: 10/14/04

  • Next message: Jensen, Peter: "RE: Can we really block users from installing applications throug h Group policy?" 
    Date: Thu, 14 Oct 2004 09:44:49 +0300
To: "Micheal Patterson" <micheal@tsgincorporated.com>, "chang zhu" <cyz2000@yahoo.com>, <focus-ms@securityfocus.com>

    I think you mean a startup script not a login script, because login
    scripts are runnning with the user's credentials.

    Bogi

    >
    >
    > I would think that a login script containing the net
    > localgroup directive
    > would help here.
    >
    > The syntax of this command is:
    >
    >
    > NET LOCALGROUP [groupname [/COMMENT:"text"]] [/DOMAIN]
    > groupname {/ADD [/COMMENT:"text"] | /DELETE} [/DOMAIN]
    > groupname name [...] {/ADD | /DELETE} [/DOMAIN]
    >
    > As an example, what I've added in the past to "add" certain
    > users and groups
    > to another group:
    >
    > net localgroup administrators "mydomainname\Domain Admins" /ADD
    > :end
    >
    > This should be just as easy to run to remove someone:
    >
    > net localgroup administrators "mydomainname\Domain Users" /delete
    > :end
    >
    > --
    >
    > Micheal Patterson
    > Senior Communications Systems Engineer
    > 405-917-0600
    >
    > Confidentiality Notice: This e-mail message, including any
    > attachments,
    > is for the sole use of the intended recipient(s) and may contain
    > confidential and privileged information. Any unauthorized review, use,
    > disclosure or distribution is prohibited. If you are not the intended
    > recipient, please contact the sender by reply e-mail and destroy all
    > copies of the original message.
    >
    >
    > --------------------------------------------------------------
    > -------------
    > --------------------------------------------------------------
    > -------------
    >
    >
    >

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Jensen, Peter: "RE: Can we really block users from installing applications throug h Group policy?"