Can you prevent User and Group Admin, from a User in local admin group?

From: WantoKnow (WantoKnow@WantoKnow.com)
Date: 01/31/03

Next message: Dirk Gently: "Re: I need Ideas on securing a remote Win2k machine"
Previous message: bonnie: "uninstall a item"
Next in thread: Keith W. McCammon: "Re: Can you prevent User and Group Admin, from a User in local admin group?"
Reply: Keith W. McCammon: "Re: Can you prevent User and Group Admin, from a User in local admin group?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

From: "WantoKnow" <WantoKnow@WantoKnow.com>
Date: Fri, 31 Jan 2003 09:35:10 -0800

Can you prevent User and Group Admin, from a User in
local admin group?
I.E; a policy that prevents a specific User from adding
or deleting accounts eventhough they are a part of the
local admin group.

Next message: Dirk Gently: "Re: I need Ideas on securing a remote Win2k machine"
Previous message: bonnie: "uninstall a item"
Next in thread: Keith W. McCammon: "Re: Can you prevent User and Group Admin, from a User in local admin group?"
Reply: Keith W. McCammon: "Re: Can you prevent User and Group Admin, from a User in local admin group?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

Re: Configure a Global Group to Be a Member of Local Administrator Gro
... that contains your computer accounts. ... that are not part of the policy are removed ... Use startup script (defined trough GPO) on your computers, ... This will add yourgroup to local Admin group on your PC. ...
(microsoft.public.win2000.active_directory)
Re: Using GP to assign groups to local admin group
... I am assuming that you are using Restricted Groups in GP to specify which ... group during a policy refresh. ... something like Domain Users to the local admin group. ... > our computers (they manipulate the computer portion). ...
(microsoft.public.win2000.group_policy)