Re: Admin equivalent group

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 02/03/04 

Date: Tue, 3 Feb 2004 07:30:13 -0700

The only simple way to do this is to make each account
that you make a member of this custom group also a member
of the Administrators group. At that point one must ask, so
then what is the use of the custom group ?

To do what you want would require visiting everything in
the OS that has a name, and a few more, and making a grant
to the custom group whereever there is one to Adminstrators.
Doing this is practically impossible, and even after that there
would be a few things the members of the custom group would
not have allowed to them but which are to Administrators. 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Steven Mueller" <anonymous@discussions.microsoft.com> wrote in message
news:6EDE995D-AE10-4281-AD40-F31F3ACADB12@microsoft.com...
> This should be an easy one for a Microsoft Guru (which I am not).
>
> In Windows XP Pro, in Computer Management, I created a new Group called
'Onyx Remote Users'.
>
> How do I make this new groups rights (to files, directories, registry,
ability to install software, etc) just like the Administrators group?  I
want this group to be able to do WHATEVER the Administrators group can do.
>
> There must be a quick, simple way to do this other than going into Local
Security Policy and matching things up there, assigning security on folders,
etc.
>
> Thanks in advance...
>
> Steve

Relevant Pages

  • Re: Software requires local administrator rights to run
    ... What you described about attempting to add the domain custom group ... Administrators group there only has power on that machine, ... group of the member, just make sure in the Add dialog you navigate to ... Now, being realistic, the need for admin may be only due to stupid ...
    (microsoft.public.windows.group_policy)
  • Domain Admins cant manage computers
    ... For some reason I am having some bizard security problem ... computer and connect to the destination workstation, ... properties of group Administrators on computer XXX: ... Of course my account is a member of Domain Admins, ...
    (microsoft.public.win2000.security)
  • Re: Unable to add Administrators - Secuirty Group
    ... "Groups or Built-in security principals" to display some of them. ... In a member ser or workstation the LOCAL Administrators won't show up unless you're doing this at the serverDC itself. ... If you want to assign to a domain Local Security Groups you may need to create a new one manually. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Creation of Adaptor FILE Configuration Store entries FAiled.
    ... SQL or was not a member of the machine's administrators group. ... > The Group Policy client-side extension Security failed to execute. ...
    (microsoft.public.biztalk.server)
  • Re: Administrator cant change security
    ... administrators group on the domain member can configure permissions on any ... computers can not reliably contact a domain controller. ... I'm signing on as Administrator on a second Windows 2003 server that is ...
    (microsoft.public.windows.server.security)