How to globally change machine local admins

From: Max (max@spamjam.com)
Date: 11/04/02


From: "Max" <max@spamjam.com>
Date: Mon, 4 Nov 2002 09:00:25 -0800


For security reasons, we want to remove users from the local admin group on
workstations throughout our domain. Is there a utility available which can
change the machine local admins to a specified group, and remove those not
in this group?

Thanks all.



Relevant Pages

  • Re: How do manage your workstations?
    ... if I’m just doing a handful of workstations. ... Only grant users local admin privileges if your employer can ... Maybe there is remote installation system that push program updates ... They that can give up essential liberty to obtain a little temporary ...
    (microsoft.public.windowsxp.general)
  • Re: Strange Local Rights Problem
    ... You wouldn't be confusing Local Admin rights with Domain ... > sitting at workstations tweaking things. ... > Does that Linux web server have an entry in the DNS server on the SBS? ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Norton Liveupdate
    ... user is a member of the power users group, ... the user should be a local Admin to perform the ... >> to update all of our Workstations on the users next ... >> user or administrator of the local system. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Restricted groups GPO deleted but still applying to WSs...
    ... I'm seeing the same thing concerning the restricted groups GPO wiping ... out all the local admin accounts. ... > admin accounts on workstations and it had an unforseen consequence. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Strange Local Rights Problem
    ... No, I'm certainly not suggesting that it is a best practice, nor do I think ... workstations the local admin assignment seems to be a necessity ... >>> respective client workstations. ...
    (microsoft.public.backoffice.smallbiz2000)