Re: delegation question....

From: Tomasz Onyszko (T.Onyszko_at_w2k.pl)
Date: 09/09/04


Date: Thu, 09 Sep 2004 23:42:47 +0200

Alfredo wrote:

> Thank you Tomasz & Chriss3 for the your response.
>
> Everything makes sense, but I am just a bit unclear on the follwing step:
>
> Once I added the Group to the "Computer Configuration\Windows
> Settings\Security Settings\Restricted Groups" then it asked me to "Configure
> Membership for <group>"
>
> I cliked "Add", and it brings a browse windows; which let's me browse to
> the domain accounts.
>
> My question is: Which account do I add?
>

You have to add all accounts that You want to be a members of the
administrators local group - in Your specific case I will put the Domain
Admins and Help Desk groups at minimum

Gpo will force this local group membership on all workstations which
will be under this GPO scope and will put this groups into thel local
admin group on workstation.

-- 
Tomasz Onyszko [MVP]
T.Onyszko@w2k.pl
http://www.w2k.pl


Relevant Pages

  • Re: SBS Slow user logons problem
    ... You deleted both accounts and created new accounts for them (I also saw the ... Go to all workstations, log in as the Domain Admin and delete ALL profiles ... I have deleted the Reverse DNS zone on the SBS server and recreated it. ... Connection-specific DNS Suffix. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS Slow user logons problem
    ... You deleted both accounts and created new accounts for them (I also saw ... Go to all workstations, log in as the Domain Admin and delete ALL profiles ... I have deleted the Reverse DNS zone on the SBS server and recreated it. ... Connection-specific DNS Suffix. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS Slow user logons problem
    ... You deleted both accounts and created new accounts for them (I also saw the ... Go to all workstations, log in as the Domain Admin and delete ALL profiles ... I have deleted the Reverse DNS zone on the SBS server and recreated it. ... Connection-specific DNS Suffix. ...
    (microsoft.public.windows.server.sbs)
  • Re: Open a UNC path with different credentials
    ... which is a local admin on every machine on the domain. ... all workstations, and then add domain user accounts to the domain group as ... domain-based workstation admin accounts setup for the purpose). ...
    (microsoft.public.scripting.vbscript)
  • Re: Workgroup to Domain Transition
    ... SPD typed: ... There is really no such thing as a workgroup in the real sense. ... to your server, join the workstations to the domain, and migrate profiles ... You can continue to use the Local User Accounts on ...
    (microsoft.public.windows.server.networking)