Domain user in local administrator group

From: oscarmok (oscarmok_at_hotmail.com)
Date: 04/21/04 

Date: 21 Apr 2004 10:23:50 -0700

If I put the domain user into their xp local administrator group, will
the gpo able to overwrite the local administrator rights?

I have users with scanner attach to their pc. I was told only power
user and higher local groups can run the scanner without any problem.
I want the user to use the scanner but still apply our gpo (like no
add/remove program; access registry etc.) All user accounts are
domain account.

Please help!!

Relevant Pages

  • Re: Question on software install and event log security
    ... to install software continuously throughout the day. ... The policy only allows. ... > those packages to be installed without the user being local administrator. ... >> However by adding them to the local administrator group they are allowed ...
    (microsoft.public.windows.group_policy)
  • Re: Question on software install and event log security
    ... There is no deny user right for manage auditing and security log but if the ... install all .msi packages even if the user is not a local administrator. ... >> local administrator could not change that user right via Local Security ... >>> local administrator group, therefore allowing all users to install ...
    (microsoft.public.windows.group_policy)
  • Re: Local Administrator
    ... I also found a VB script that adds to the local administrator account. ... only works from a W2K or 2003 server? ... What I need is the users to have, ocasionally, local admin rights ... remove the domain group from the local administrator group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Question on software install and event log security
    ... those packages to be installed without the user being local administrator. ... local administrator could not change that user right via Local Security ... All users must be able to install software on all computers, ... > However by adding them to the local administrator group they are allowed ...
    (microsoft.public.windows.group_policy)
  • Re: xp pro, granting domain user access to local resources?
    ... default user account locally has Admin rights, ... I don't have any issues granting the domain user admin rights on the ... I have a USB scanner installed on one computer, ...
    (microsoft.public.windowsxp.security_admin)