Re: How to globally change machine local admins

From: Karl Levinson [x y] mvp (levinson_k@excite.com)
Date: 11/04/02 

From: "Karl Levinson [x y] mvp" <levinson_k@excite.com>
Date: Mon, 4 Nov 2002 13:06:56 -0500

There are a number of Windows Resource Kit command line utilities that I
think should do this, such as CUSRMGR. The Resource Kit is not free,
however.

Be careful when using CUSRMGR, as the switches are case sensitive, and you
have the ability to lock yourself out of every computer on the network if
you don't test your script on one test machine first.

"Max" <max@spamjam.com> wrote in message
news:OjcLHcChCHA.1148@tkmsftngp11...
> One thing I didn't include in the original post ... we are still an NT
> domain, not AD. Most of our workstations are Win2K.
>
>
> "Arild Bakken" <arildb_@hotmail.com> wrote in message
> news:eE9vtUChCHA.2352@tkmsftngp12...
> > Create a group policy on the container where the computer objects are
> > located in AD (assuming the computers are members of the domain), then
> > change the Restricted Groups section of the machine policy. Add the
> > "Administrators" group and set which users should be members.
> >
> > Arild
> >
> > Max wrote:
> > > For security reasons, we want to remove users from the local admin
> > > group on workstations throughout our domain. Is there a utility
> > > available which can change the machine local admins to a specified
> > > group, and remove those not in this group?
> > >
> > > Thanks all.
> >
> >
>
>

Relevant Pages

  • Re: MSI files update using Group Policy
    ... See if the information from the Office 2003 Resource Kit ... you apply the update to the Office admin point ... How do i use group policy to deply .msp files? ...
    (microsoft.public.officeupdate)
  • Re: Outlook 2003 Junk Email Deployment Problem
    ... In resource kit once installed in a file called ... Key ID keyCUOutlookJunkEmail in Registry path ... >>You can use Group Policy to force the setting. ... >>Microsoft Office and Microsoft Office related News ...
    (microsoft.public.outlook.installation)
  • Re: File Permissions
    ... gpresult command (resource kit) tool in verbose or super-verbose mode to see ... Also, if a security template is being applied with group policy, that could ...
    (microsoft.public.win2000.security)
  • Re: How to script enable spamfiltering on all mailboxes ?
    ... > Assuming your talking about Outlook 2003, you can use the ADM file from ... > Office 2003 Resource Kit to configure a Group Policy. ... Would a Office2003 group policy work in my environment? ...
    (microsoft.public.exchange2000.admin)
  • Changing Local Admin Passwords!
    ... Hello and thank you for reading. ... Currently I change my Local Admin ... passwords using cusrmgr and it works great however, I do not know if it ...
    (microsoft.public.windows.server.security)