Re: Can you prevent User and Group Admin, from a User in local admin group?

From: Keith W. McCammon (km@km.com)
Date: 01/31/03 

From: "Keith W. McCammon" <km@km.com>
Date: Fri, 31 Jan 2003 13:06:50 -0500

No. Generally speaking, if you don't want them to have full control of the
box, they shouldn't be in the admin group.

"WantoKnow" <WantoKnow@WantoKnow.com> wrote in message
news:05b801c2c94f$1a964410$cef82ecf@TK2MSFTNGXA08...
> Can you prevent User and Group Admin, from a User in
> local admin group?
> I.E; a policy that prevents a specific User from adding
> or deleting accounts eventhough they are a part of the
> local admin group.

Relevant Pages

  • Re: Smart user removing domain admin group from local admin group
    ... Also note the Restricted Group Policy will clear every existing ... > change the group membership after GPO application, ... > the local admin group, the membership will refresh every time the GPO is ...
    (microsoft.public.win2000.active_directory)
  • Scheduled Task will not run on Win2K3 Server (Ent Edition)
    ... control on the folders where the application is stored. ... The local admin group also has full control on the ... Registry key that the application created to store ...
    (microsoft.public.windows.server.general)
  • Re: Lost Internet access after added in admin group
    ... Are running ISA Firewall Client on the computer? ... you ping websites when you move the user to Local Admin Group? ... I added a domain user to the admin group of a local PC ... > domain user to the local admin group I lose Internet access. ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Add Domain Account to Local Admin Group
    ... we ran into alot of problems with it, and abandon it due to problems ... groups automatically to the local admin group on our desktops. ... groups via group policy without overriding the current members of the local ...
    (microsoft.public.win2000.advanced_server)
  • Re: Help with local adming rights on workstations
    ... >> to explicitly and individually add select users to the local machine ... >> to the local admin group on the machines, but using RG will erase any ... >> manual additions to the local admin group. ...
    (microsoft.public.win2000.group_policy)