Re: Administrative rights

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 08/09/04 

Date: Mon, 09 Aug 2004 17:43:57 GMT

Using restricted groups can remove all other users/groups from the local
administrators group [other that built in administrator I believe]. If not doing such
already, make sure that the group you created is a domain global group for your
helpdesk and also include domain admins and administrator in the restricted groups
entry for administrators for that OU. --- Steve

"Andymackk" <google@andymackk.co.uk> wrote in message
news:f89f7cd0.0408090334.4528f2c8@posting.google.com...
> I have added in all the 2nd line supporters in my company to a
> security group called Helpdesk.
> In GP I have added in the helpdesk group to the administrators group
> within restricted groups in a workstations OU where all the computer
> accounts are held.
> The group gets added in to the administrators group ok, and most
> functions are available, but there are some programs ( such as windows
> updates) that wont run due to no permissions. Logging in as the local
> admin doesn't work either. Only If I log in as myself (Enterprise
> admin) will it work. Any ideas what I have done wrong?
>
> Thanks for any help

Relevant Pages

  • Re: restricted groups for local admin rights
    ... I'm referring to local administrators and not domain administrators?) ... > describe you want to use the "member of" option for restricted groups. ... > way you can add a global group to the administrators group without affecting ...
    (microsoft.public.windows.group_policy)
  • RE: Removing local users from local administrator group
    ... Create an OU including all user accounts you want to move from local ... administrators group. ... Apply Restricted Groups group policy to this OU. ...
    (microsoft.public.win2000.group_policy)
  • Re: Dmin group member ship keeps disappearing.
    ... You either have Restricted Groups enabled in the domain or are using a Group ... Policy shutdown script to manage membership of the administrators group. ... > couple of computers and adding admins to the local admin account. ... > fine for the local user I added ...
    (microsoft.public.windowsxp.security_admin)
  • Re: restricted groups frustration!
    ... the group you want added to the administrators group. ... configuration, windows settings, security settings, restricted groups. ... and see this group in the local admins group? ...
    (microsoft.public.windows.server.active_directory)
  • Re: restricted groups
    ... I ended up scrapping the restricted groups. ... >> the administrators group on the PC, ...
    (microsoft.public.windows.server.active_directory)