Re: Restoring Administrative Rights to domain computers



As Lanwench indicated you can use a Group Policy startup script. I would
also consider "visiting" him with a couple of guys from security [Vic Mackey
types] behind closed doors with the camera shut off and explain to him how
things work around here. Also take a look at the article below on how to use
Group Policy and Restricted Groups that can make sure that your membership
in the local administrators group is enforced by two possible methods. If
you are interested in implementing it should only be used at the OU [not
domain] level to enforce Restricted Groups on the domain computers. ---
Steve

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

"Merman" <merman.au@xxxxxxxxx> wrote in message
news:uk0MRLxFGHA.1260@xxxxxxxxxxxxxxxxxxxxxxx
> Good day to you!
>
> I would to know how can I restore the Administrative Rights to a domain
> computer. The computer had been configured, by the user who has local
> administrator rights, to restrict the Administrative Rights on the system.
> Is there a way for my to automate this process through a logon script?
>
> Thank you very much.
>


.



Relevant Pages

  • RE: Disabling sharing and group policies
    ... A user with local Administrator rights to ... his/her machine *can* exempt his/her machine from group policy application. ... Actually, as I said, anybody with administrative rights on his/her machine ...
    (Focus-Microsoft)
  • Re: Group Policy for detached domain client
    ... Once they are off the LAN they log into ... > their machines as usuall but do not have administrative rights. ... > saying that once the machine is off the network, the group policy does not ... apart from manually adding them to the local policy on each ...
    (microsoft.public.win2000.group_policy)
  • Re: No access to Group Policy Object
    ... | unspecified error with the message: No access to Group Policy Object on ... | this computer(you may not have administrative rights)! ... | I am trying to do this for a reason: I cannot turn off System Restore ...
    (microsoft.public.windowsxp.security_admin)
  • Can user change IP settings with Group Policy Enabled
    ... We have group policy in almost a locked down state, ... account doing it. ... were no patterns between the computers. ...
    (microsoft.public.windowsxp.network_web)
  • RE: Local user policy
    ... > Thank you for posting to the SBS Newsgroup. ... > When client computer starts up, the command will be executed by system ... > account to add the domain users group to local administrators group. ... You are in the Group Policy Object Editor. ...
    (microsoft.public.windows.server.sbs)