Re: Help on Restricting Users

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Take a look at the 'Restricted Groups' GPO. This will most certainly be one
of your solutions. Another possibility would be to use a startup script.
Remember that, by default, the group 'Domain Users' is a member of the local
'Users' group on all of the computers.

If you decide to use the Restricted Groups GPO ( which I would highly
suggest that you do ) then please pay attention to the behavior of this GPO.
Namely, it will remove all 'members' of the group in question. So, you will
need to make sure that you 'put back' the Domain Admins....

--
Cary W. Shultz
Roanoke, VA 24012

http://www.activedirectory-win2000.com
(soon to be updated!!!)
http://www.grouppolicy-win2000.com
(soon to be updated!!!)



"Alfonso" <alfonso.santos@xxxxxxxxx> wrote in message
news:1130436311.612300.74210@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> How can I achieve that on a domain with hundreds of computers?
> I'm wondering if I could use some GPO
>
> Thank you
>


.

Relevant Pages

  • Re: advise needed
    ... It sounds like you want to use the Restricted Groups GPO to make a certain ... security group a member of the affected computer's Local Administrators ... group become a member of the computers Local Administrators group. ...
    (microsoft.public.win2000.group_policy)
  • Re: Loginscript is lacking credentials.........
    ... Create the gpo in the ou where the Computers reside, ... right click on restricted groups and select new group (For the local ... machine is a member of the local administrators group him/herself, ... I was under the impressions that all GPO's ran with top admin credentials. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Remote Desktop rights to Member Servers via GPO
    ... of this group and adds your domain group via the net localgroup /add ... My understanding of Restricted groups is that the GPO will ... SP4 or better Active Directory Domain + Member servers, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Want to add users to their local Admin group
    ... > Above assumes adding user to Administrators group on more than one PC. ... > operation on more than on PC, I think we should use GPO here. ... Restricted groups would be great if we could ... PC-1 with user Joe, PC-2 with user Mary, and PC-3 with user Peter. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restricted group functionality
    ... GPO that affects the computer side of things you would have to make sure ... that the computer account objectin question are located in an OU (well, ... we are targeting the administrator group. ... making use of the Restricted Groups can be a bit more difficult than ...
    (microsoft.public.windows.group_policy)