Re: server local admin group

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 06/29/05


Date: Wed, 29 Jun 2005 11:56:26 -0500

You can add the domain group to the local administrators group manually
using lusrmgr.msc on each server or via Group Policy Restricted Groups
"member of" if you have a large number of servers to do such to. Always use
Restricted Groups at the OU level when you want to use it on domain
computers. A Group Policy startup script using the net localgroup command is
another option using a Group Policy linked to an OU that contains the
servers you want to do such to. --- Steve

"SYaroslav" <SYaroslav@discussions.microsoft.com> wrote in message
news:9339E392-2494-4370-92C3-3D761E851FF0@microsoft.com...
> How can I add a Domain Security Group to have Local Admin Group
> permissions
> on certain servers?



Relevant Pages

  • Re: remove local admin right in 200 client computer
    ... You could use Group Policy Restricted Groups using "members of this group" ... to enforce membership of the local administrators group. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Site Policies and Domain Controllers
    ... to the local administrators group of all servers on a specific subnet, ... You could try to create the Group Policy linked to the site and then deny the specific domain controller the "Read" and "Apply Group Policy" permission on the GP: ...
    (microsoft.public.windows.server.active_directory)
  • Re: PERFMON4 from XP to 2000, different domains...
    ... If there are a lot of servers that can be done via Group Policy ... Restricted Groups to manage groups on domain workstations implement it at ... > if I log on XP as domain2 admin I can read them without problem... ...
    (microsoft.public.win2000.security)
  • Re: add user to local administrators group
    ... Use Restricted Groups - http://support.microsoft.com/?id=228496 ... Staff wrote: ... Can I add user to local administrators group via group policy? ...
    (microsoft.public.windows.server.security)
  • Re: Terminal Server GPO Issue
    ... servers that is not in the OU where the GPO is supposed to be applied and I ... Microsoft Windows Operating System Group Policy Result tool v2.0 ... Sharepoint Auth GPO ... Event Log Settings ...
    (microsoft.public.windows.server.active_directory)