Re: Restricted Groups

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 07/22/04


Date: Thu, 22 Jul 2004 06:03:12 GMT

Not all security policy settings are removed when a computer is remove form the scope
of the policy. Restricted groups is one of them, and file/registry permissions is
another. Settings under administrative templates are usually changed to reflect the
Local Group Policy setting if the new location has an undefined setting in the
PO. --- Steve

"Srinivas Acharya" <anonymous@discussions.microsoft.com> wrote in message
news:1b9201c46fad$7960d130$a401280a@phx.gbl...
> Hi,
> I have added the domain user to local administrator group
> of all the PCs coming under one OU with the help of
> restricted groups. but now I have moved that PC from that
> OU. But still that user is in the administrator group of
> those PCs. Why still that user is having admin previleges
> even though that user is no more in that OU. Please any of
> you could address this issue?.
> Regards,
> Srinivas Acharya



Relevant Pages

  • Re: Restricted Groups
    ... Not all security policy settings are removed when a computer is remove form ... "Srinivas Acharya" wrote in message ... > I have added the domain user to local administrator group ... > those PCs. ...
    (microsoft.public.win2000.active_directory)
  • Re: Needing advice for administrative rights....
    ... expanding on what Joe said, you can manage the membership list of the local ... Administrator group on PCs using the Restricted Groups functionality. ...
    (microsoft.public.windows.server.active_directory)
  • Group Policy setting not working
    ... >From This Station. ... When I try to install programs remotely to PCs. ... policy settings to correspond with the article but it is still not working. ... SP4 and Windows XP Pro SP2. ...
    (microsoft.public.windowsxp.general)
  • Restricted Groups
    ... I have added the domain user to local administrator group ... restricted groups. ... those PCs. ...
    (microsoft.public.win2000.active_directory)
  • Restricted groups
    ... I have added the domain user to local administrator group ... restricted groups. ... those PCs. ...
    (microsoft.public.win2000.active_directory)