Re: OU delegation

Interesting. I have always simply added the groups to the computers'
local Adminstrators group. The same thing could be done by adding
Administrators to the "Restricted Groups" setting and specifying the
delegated group.

This setting is under:

Computer Configuration
Windows Settings > Security Settings > Restricted Groups

Regards,

J Wolfgang Goerlich

On Jul 26, 12:08 pm, "tin" <master...@xxxxxxxxxxxxxxxx> wrote:
Hello, I've delegated full controll to a security group to an OU, but that
group still not able to manage computers remotely. For instance, they cannot
perform administrative tasks on computers in that are in this OU. I know I
can run a script to add this security group to all the active computers in
that OU but I just wanted to know if there's another way to do this? I dont
think you can automate this through GPO though, but I could be wrong.

Thanks,
TC


.

Relevant Pages

  • Re: OU delegation
    ... Administrators to the "Restricted Groups" setting and specifying the ... Windows Settings> Security Settings> Restricted Groups ... The Restricted Group definition would ... perform administrative tasks on computers in that are in this OU. ...
    (microsoft.public.windows.server.security)
  • Re: OU delegation
    ... Administrators to the "Restricted Groups" setting and specifying the ... Windows Settings> Security Settings> Restricted Groups ... The Restricted Group definition would ... perform administrative tasks on computers in that are in this OU. ...
    (microsoft.public.windows.server.security)
  • Re: Default Security Groups
    ... Domain Admins group will be added to local administrators group by default. ... Start Active Directory Users and Computers from any domain controller. ... Click the Group Policy tab, click NEW, and then name the policy. ... policy and you see the Administrators group listed in the Restricted Groups ...
    (microsoft.public.windows.server.migration)
  • Re: Remote Desktop Users and Least User Rights
    ... the Administrators group, the list of authorized remote users (My Computer ... Remote tab> Select Remote Users) gets wiped out. ... or you could create a simple startup script assigned via GPO to add them. ... You can create/link a new GPO at the appropriate OU where your computers ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Allowing a domain user account (specify) to add workstation to Windows 2000 domain (SP4)
    ... into the local administrators group on the workstation. ... restricted groups you can then modify the group membership to get users into ... Create the gpo in the ou where the Computers reside, ... we removed the right to add workstation to Windows 2000 ...
    (microsoft.public.win2000.active_directory)