Re: add group back.

From: Eric Chamberlain (eric.chamberlain_at_newsgroups.nospam)
Date: 05/05/04

  • Next message: Peter L: "DCOM Error in log" 
    Date: Tue, 4 May 2004 19:44:54 -0700

    Roger is correct, I was assuming that the op was stuck because there were no
    other accounts that were members of the Administrators group. The better
    way to create the GPO, is to create a Restricted group for Domain Admins and
    then add Administrators to member of.

    "Roger Abell [MVP]" <mvpNoSpam@asu.edu> wrote in message
    news:uv2sIZgMEHA.1312@TK2MSFTNGP12.phx.gbl...
    > Oh my, con caro . . .
    >
    > When you define a restricted group you are stating the exact
    > membership of the group. So, in addition to Domain Admins
    > you also need to specify any other local accounts on that
    > machine that need to be members of Administrators.
    >
    > --
    > Roger Abell
    > Microsoft MVP (Windows Server System: Security)
    > MCDBA, MCSE W2k3+W2k+Nt4
    > "js" <js@someone@hotmail.com> wrote in message
    > news:%23Rc42fdMEHA.1468@TK2MSFTNGP12.phx.gbl...
    > > Thanks Eric!
    > >
    > > "Eric Chamberlain" <eric.chamberlain@newsgroups.nospam> wrote in message
    > > news:uhkkebXMEHA.3016@tk2msftngp13.phx.gbl...
    > >> Go to the OU that the machine is a member of and create a new GPO.
    > >> In the new GPO, under computer, security settings, choose Restricted
    > > groups.
    > >> Create a new entry for administrators and make Domain Admins a member.
    > >>
    > >
    > >
    >
    >

  • Next message: Peter L: "DCOM Error in log"

    Relevant Pages

    • Re: Security Template question
      ... all of which are members of the administrators group. ... and letting them know that this is the account for day-to-day use. ... Roger Abell ...
      (microsoft.public.win2000.security)
    • Re: add group back.
      ... Roger is correct, I was assuming that the op was stuck because there were no ... other accounts that were members of the Administrators group. ...
      (microsoft.public.windows.server.general)
    • Re: I need a permission GURU!
      ... Administrators and Users are two separate groups and "deny" to users ... > permissions on a file or folder in either OS to lock out members of ... > Its as if all accounts fall under the "users" group. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Security Template question
      ... all of which are members of the administrators group. ... > account, which is to be used only when its powers are being used. ... > Roger Abell ...
      (microsoft.public.win2000.security)
    • Re: Administrator Group Accounts
      ... >> I have several user accounts that are Members of the Administrators ... account that is generated during installation of XPpro had something ...
      (microsoft.public.windowsxp.basics)