Re: policy to define the local Administrator rights on clients

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 07/22/04 

Date: Thu, 22 Jul 2004 06:05:12 GMT

Restricted groups at the OU level will do that. --- Steve

http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q320065
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/611.asp

"Tiago" <tiago.5.74@spamgourmet.com> wrote in message
news:027901c46f8f$c37c82a0$3a01280a@phx.gbl...
> Hello Everybody
>
> I would like to find a policy (in AD), where i can define
> the Members of the Administrators groups on Clients. Can
> anybody giv me a hint?
>
> The enviroment is a multi site w2k AD-Domain.
>
> Thanks a lot.
> Tiago
>

Relevant Pages

  • Re: add a group to the local admin on all client machines
    ... Move the machines into their own OU and use restricted groups in Group ... Policy/machine configuration to do such. ... etails. ... --- Steve ...
    (microsoft.public.win2000.security)
  • Re: Making a domain account a local admin wherever it is used?
    ... Steven L Umbach wrote: ... > There are a couple of ways to do this - using Group Policy Restricted Groups ... > adds the domain user to the administrators group. ... Thank you very much for that, Steve. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: 2003/XP Local Policies-Power Users
    ... True there is no power users group available, ... --- Steve ... >> I have been using restricted groups to add domain admins ... the event log but should not stiop the rest of the policy ...
    (microsoft.public.win2000.security)
  • Re: Want to add users to their local Admin group
    ... You can accomplish this using Restricted Groups feature of the Group Policy. ... policy - you control its membership ultimately - meaning, ... while Domain wide being part of the Domain Users. ...
    (microsoft.public.windows.server.active_directory)
  • Re: remove local admin rights
    ... I have set up a policy to make all domain users Local Admins - I ... users have remained in the local Admin group... ... Double-click Startup, click Add ... Restricted groups are useful sometimes but I'm old fashioned and prefer the ...
    (microsoft.public.windows.group_policy)