Re: server local admin group

From: SYaroslav (SYaroslav_at_discussions.microsoft.com)
Date: 06/29/05 

Date: Wed, 29 Jun 2005 11:36:03 -0700

what about if i want to grant local admin rights to only one DC, can't realy
use OU because it contains other servers that i don't want that group to
access.

"Steven L Umbach" wrote:

> You can add the domain group to the local administrators group manually
> using lusrmgr.msc on each server or via Group Policy Restricted Groups
> "member of" if you have a large number of servers to do such to. Always use
> Restricted Groups at the OU level when you want to use it on domain
> computers. A Group Policy startup script using the net localgroup command is
> another option using a Group Policy linked to an OU that contains the
> servers you want to do such to. --- Steve
>
>
> "SYaroslav" <SYaroslav@discussions.microsoft.com> wrote in message
> news:9339E392-2494-4370-92C3-3D761E851FF0@microsoft.com...
> > How can I add a Domain Security Group to have Local Admin Group
> > permissions
> > on certain servers?
>
>
>

Relevant Pages

  • Re: Terminal Server GPO Issue
    ... servers that is not in the OU where the GPO is supposed to be applied and I ... Microsoft Windows Operating System Group Policy Result tool v2.0 ... Sharepoint Auth GPO ... Event Log Settings ...
    (microsoft.public.windows.server.active_directory)
  • Re: Terminal Server GPO Issue
    ... servers that is not in the OU where the GPO is supposed to be applied and I ... Microsoft Windows Operating System Group Policy Result tool v2.0 ... Sharepoint Auth GPO ... Event Log Settings ...
    (microsoft.public.windows.server.active_directory)
  • Re: Application error log
    ... Disclaimer: This posting is provided "AS IS" with no warranties, ... I have 3 servers in our office running win 2003 R2 servers ... I did not set any group policy in my servers. ...
    (microsoft.public.windows.server.networking)
  • Re: Unable to Block Group Policy Inheritance
    ... have a group policy named Login that is at the user level that maps ... named Servers that I want to block the inheritance of the group policy ... This means that you cannot block inheritance ...
    (microsoft.public.windows.server.active_directory)
  • Re: Application error log
    ... Are the errors because of this missing entry. ... I have 3 servers in our office running win 2003 R2 servers ... I did not set any group policy in my servers. ... Windows cannot query for the list of Group Policy objects. ...
    (microsoft.public.windows.server.networking)