Re: Two XP Pro problems

From: Roger Abell [MVP] (mvpNOSPAM@asu.edu)
Date: 12/04/02 

From: "Roger Abell [MVP]" <mvpNOSPAM@asu.edu>
Date: Wed, 4 Dec 2002 08:29:49 -0700

When you run netdiag on each XP does the result show errors ?
How about dcdiag?
Are you sure that the restricted group is being applied
correctly ? It is a little trick to use this to control the
membership of the local groups. 

--
Roger Abell
MS MVP (Security, Windows), MCDBA,  MCSE both
Associate Expert - Windows XP ExpertZone
http://www.microsoft.com/windowsxp/expertzone
"Kjartan Þór Kjartansson" <kjartan@frisk.is> wrote in message
news:eZVh1himCHA.1244@tkmsftngp02...
> Hi all,
>
> Im having a pickle with two XP Pro machines. I have Active Directory set
up
> and both computers are members of the domain. Both computers have SP1 and
> all security patches installed.
>
> One of the computers clears the Local Administrators group of all accounts
> except the local Administrator Account even though the group membership is
> set by a Group Policy/Restricted Groups setting.
>
> The other computer sometimes doesn't run its login script.
>
> If any-one can help please give me some information.
>
> Best regards
> Kjartan Þór Kjartansson
>
>

Relevant Pages

  • Re: restricted groups for local admin rights
    ... If I want to add one domain user to one computers local administrators ... > describe you want to use the "member of" option for restricted groups. ... > strictly enforce membership of the local administrators group. ...
    (microsoft.public.windows.group_policy)
  • Re: Win 2003 Local Admin Problem
    ... because some machines have individual users added as local administrators. ... > group, and define its membership to include Domain Admins group, for ... it is only partially successful. ...
    (microsoft.public.windows.group_policy)
  • Re: Removing Sharing & Security tabs from the Group Policy
    ... local administrators though if they are skilled they can find work around ... computer from the network on your domain computers to allow only ... users the Sharing tab will be disabled. ... But if that user is in Local Admin group Sharing tab will be enabled ...
    (microsoft.public.win2000.security)
  • Re: User type
    ... > you created to Local Administrators group on the computers. ... > The way I usually do it is by using a script like this ... >> them to the Domanin Admin group? ...
    (microsoft.public.windows.server.setup)
  • Re: Group Manipulation
    ... option for your new global group that contains the users that you want to be ... The computers that you want this to be enforced on ... Restricted Groups is configured. ... >> users being local administrators on all those computers keeping in mind ...
    (microsoft.public.windows.group_policy)
Loading