Re: Re: Change group membership

From: Jerold Schulman (Jerry_at_jsiinc.com)
Date: 10/06/04 

Date: Wed, 06 Oct 2004 09:32:00 -0400

No.

It puts these users in a global group which is added to the local Administrators group on the workstations.

On Wed, 6 Oct 2004 06:01:04 -0700, enduro <enduro@discussions.microsoft.com> wrote:

>Doesn't it put all users to an domain admins group?
>
>
># Right-click Restricted Groups (under Computer Configuration\Windows
>Settings\Security Settings\Restricted Groups), and then click Add Group .
>
>
># Click Browse . Focused on the local computer, click the group to which you
>want your global group to be a member (in this case, the "Administrators"
>group), click ADD , and then click OK . You are returned to the group policy
>and you see the administrators group listed in the Restricted Groups window.
>
>thanks
>
>
>
>
>
>
>
>
>"Jerold Schulman" wrote:
>
>> On Wed, 6 Oct 2004 05:09:05 -0700, enduro <enduro@discussions.microsoft.com> wrote:
>>
>> >I'm having w2k server and w2k workstations.Problem: cannot change domain user
>> >to a local computer administrator by putting it to an administrators group on
>> >local computer:( Error message is like "cannot acces "####" domain or smth.
>> >
>> >Is the problem with qroup policy, or...
>> >
>> >Please help!
>>
>>
>> See tip 5319 in the 'Tips & Tricks' at http://www.jsiinc.com
>>
>> Jerold Schulman
>> Windows: General MVP
>> JSI, Inc.
>> http://www.jsiinc.com
>>

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

Relevant Pages

  • Re: restricted groups for local admin rights
    ... > user to the local administrators group on that computer. ... >> First off be sure to use Restricted Groups at the Organizational Unit ... >>> I have read several articles on how to do it but it is confusing to me. ...
    (microsoft.public.windows.group_policy)
  • Re: Restricted Groups issue
    ... > Keep in mind that Restricted Groups will enforce membership of the ... > Groups on those computers, then I would just manually add those users to ... > the local administrators group on their workstations as it sounds like you ...
    (microsoft.public.windows.group_policy)
  • Re: Group Policy
    ... administrators group of all computers in the domain. ... restricted groups, however this GP setting will remove all the users ... to add a domain group to the local administrators group ...
    (microsoft.public.windows.server.active_directory)
  • Re: restricted groups for local admin rights
    ... First off be sure to use Restricted Groups at the Organizational Unit level ... way you can add a global group to the administrators group without affecting ... the current membership of the local administrators group on the computers ... strictly enforce membership of the local administrators group. ...
    (microsoft.public.windows.group_policy)
  • Re: Scripting questions
    ... which is a member of the local Administrators group on computer "WST101". ... Bind to the local administrators group on the remote computer and use the ...
    (microsoft.public.windows.server.scripting)
Loading