Re: local admin-rights

From: Arild Bakken (arildb_@hotmail.com)
Date: 12/02/02 

From: "Arild Bakken" <arildb_@hotmail.com>
Date: Mon, 2 Dec 2002 21:03:18 +0100

maestro wrote:
> How can I configure it so that a OU has admin-rights on the machine's
> they logon to other then manually add them to the local-admin group(I
> have to do this on 150 systems).
> I heard something about restricted groups but I played a bit with it,
> but not a good result so far.
>
> Tx.

Hi,

Group Policy with restricted groups should do the trick. Add the group
policy to the OU that the computer resides in, since this policy applies to
the computer, and not the user. Add the "Administrators" group in the
restricted group section, and define the users that are to be members of the
local administrators group. Remember that this will override any manually
added members each time the policy is reapplied.

Arild

Relevant Pages

  • Re: Restricted Groups GPO
    ... The startup script could add the required groups to the local admin group on ... I've only used it to stipulate> what domain groups are members or what local groups - I didn't care that> nobody else could be a member;-) ... > I need to use the Restricted Groups policy setting to enforce> membership in the local Administrators group on member servers and> workstations by certain global groups ...
    (microsoft.public.windows.server.active_directory)
  • Re: remove local admin right in 200 client computer
    ... You could use Group Policy Restricted Groups using "members of this group" ... to enforce membership of the local administrators group. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Help with my WMI
    ... You could use the "Restricted Groups" policy to add members to a "Restricted ... > I would like my script to Add a specified group to the pc's Local Admin ...
    (microsoft.public.win2000.group_policy)
  • Re: problem with "Restricted Groups" within a GPO linked to my domain.
    ... Restricted Groups does not prevent a user that can add members to a RG from ... What RG will do however is to enforce membership of the RG at the ... > Groups" for a policy (that policy being linked to the domain, ...
    (microsoft.public.security)
  • Restricted Groups GPO
    ... I need to use the Restricted Groups policy setting to enforce ... is still a need for certain workstations to be able to manually add ... people into the local Administrators group as well. ... aren't members are added, accounts that are members but aren't listed ...
    (microsoft.public.windows.server.active_directory)