Re: all domain user should have admin rights on single computer

Hello Adnan,

Create a new OU move the compouter to it, create a new GPO and use Restricted Groups from Computer configuration>Windows settings>Restricted Groups Here you can configure the settings for your needs. If you are ready with it, rightclick the policy name and check the securoty tab that apply Group policy is checked. And do a test with one testuser account BEFORE and do not move other computers to this OU, so that no other machines get the policy.

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.

Hi,

I am running a domain on windows server 2003 with almost 200
computers.

I want that all the domains user should have the admin rights on a
particular computer that any time when a user connects to that
computer using the domain he can hve the complete admin rights. that
computer is also part of the domain.

can any body help me



.

Relevant Pages

  • Re: client = local admin
    ... I can only have admin rights when i apply the policy in the folder ... Because restricted groups apply only to computers, ... he is by default an administrator on that local machine ...
    (microsoft.public.windows.server.active_directory)
  • Secure Boot Settings "on." Cant turn "off" on local system.
    ... >I cannot turn off the Secure Boot Settings for logon, ... or I don't have admin rights. ... >group policy since there is no PDC and I do have admin ...
    (microsoft.public.win2000.security)
  • Re: allow users to run application
    ... > you will find users denied access to the application folder in program ... > user computer use policy. ... The link below explains SRP more. ... >>I have a bunch of application that needs admin rights to run. ...
    (microsoft.public.win2000.group_policy)
  • Re: User accounts being deleted
    ... If someone has set a policy that is affecting local group membership, ... > just dont run if you don't have local admin rights. ... >>Hi Andy, ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Admin rights to local system via GPO
    ... I have verified once again the recommended GPO settings ... Microsoft Windows XP ... Group Policy was applied from: ... The group still does not have admin rights ...
    (microsoft.public.windows.group_policy)