Re: make one group a member of another

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 03/13/05

  • Next message: Roger Abell: "Re: Event 529 and 681" 
    Date: Sun, 13 Mar 2005 09:11:37 -0700

    "Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
    news:%23jxfhucJFHA.616@TK2MSFTNGP10.phx.gbl...
    > If that is what you really want to do, then open up the Local Users and
    > Computers Management Console [ lusrmgr.msc and select groups] on that
    server

    Actually, one would do this on the Pro machine and there add the
    domain group to the machine local administrators group of the Pro
    If the domain group does not already exist, that is done with dsa.msc
    (Users and Computers tool) on or targetting the domain, defining the
    group and adding accounts to it.
    Steve, I think you overlooked OP's mention of this being on W2k Sp3 Pro 

    -- 
Roger
> and add domain users to the administrators local group. There are ways to
> automate this if the number of computers are large. There are often work
> around [not always] to applications that will run only when the user is a
> local administrator. You want to avoid making users local administrators
> whenever possible.  -- Steve
>
>
> "shawn" <shawn@discussions.microsoft.com> wrote in message
> news:F5A91577-C80C-4FC6-934D-1CB32345E64C@microsoft.com...
> >
> > I need to make the domain users group a member of the local admin group
on
> > my windows 2000 pro. - SP4 pc.  Not sure how to accomplished this.
> >
> >
> > NOTE:  Basically make all of my users (domain users) who log onto the
> > windows 2000 server on certain PCs a member of the local admin group of
> > the
> > affected PCs.
>
>
  • Next message: Roger Abell: "Re: Event 529 and 681"

    Relevant Pages

    • RE: basic / domain authentication
      ... Since the domain users are local administrators on the box, ... Short of removing the Log on Locally ... right for the local administrators group, ... Internet Information Server ...
      (microsoft.public.inetserver.iis.security)
    • Re: Adding domain users as local XP administrators...
      ... Restricted Group definition to be effective. ... Microsoft MVP (Windows Server System: ... > automatically add "domain users" as a member of the local administrators ... > "domain users" is also a member if ITS OWN local administrators group! ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Windows 2003 Server and user profiles...help needed.
      ... If in the course of rebuilding the server you created a new domain (even one ... with the same name as the old domain) then domain users will get a new ... > of the XP Pro office PC's. ... > When I try and test by logging on from my office XP Pro PC all my settings ...
      (microsoft.public.windows.server.general)
    • Logon Locally to XP on Domain
      ... I know this is a newsgroup for 2000 server but I'm using 2003 server. ... I have a domain set up with another PC running XP Pro. ... domain users unless I specifically add the users domain account to the ... allow all domain users to login to the XP computer? ...
      (microsoft.public.win2000.active_directory)
    • Re: Least amount of privileges
      ... It depends on what the domain users group has for permissions. ... Does this third party program have a service account that runs the app for ... moving this app off of your sql server and put it on a seperate server. ...
      (microsoft.public.windows.server.active_directory)