Re: Unable to add/remove members of local Admin group

Drew wrote:

I have a few machines where someone has hacked the system to prevent changes to the local administrators group. [...]

Back up documents, erase the disk, reinstall. It's the only way to be sure the system is back in proper working order. Perhaps you should interview the person or persons who might have been responsible first in case there is some other reason why this isn't working.

I could simply pull these systems off the network, however I would like to attempt to create a network wide solution so that others, with local administrative rights, wont be able to duplicate this.

There is no way you can prevent people with administrative rights from messing up the system one way or another. If you can't trust them, you can't afford to give them administrative rights. If you are obliged to like it or not, you may have to resign yourself to frequent reinstallations - or perhaps just resign. :-)

Harry.
.

Relevant Pages

  • Re: blocking games
    ... > If you uninstall the games from the workstation using control panel/add ... the users will not be able to reinstall them - users and power ... Isn't the default config in SBS for end users to be local administrators? ...
    (microsoft.public.windows.server.sbs)
  • Live update with GP
    ... Trying to get Norton Live update to run with group policy ... the GP is applied live update will run. ... administrative rights, but i would rather not have to set ... all users to local administrators on each system. ...
    (microsoft.public.windows.group_policy)