Re: help with use of restricted groups and individual rights assigment

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 12/14/04 

Date: Tue, 14 Dec 2004 00:15:05 GMT

I have not tried this myself but others have reported success in adding
interactive to the list. I believe you will have to type it in. Then any
user logging onto the computer will be a local administrator but only on
that computer. --- Steve

"Kiosk" <jramos@netcom.com> wrote in message
news:vm4ir05em69cm3vq99tuc09c86jobepgdd@4ax.com...
>
>
> Hi,
> I am using GPO with restricted groups to assign specific service
> accounts to admin group on the workstations. However I just realized
> that by also using the same restricted group to grant user groups
> admin access i am also giving all users admin rights to all the
> workstations.
> How do i continue using GPO restricted groups but separately grant
> individual user local admin to their own workstation alone?? Thx

Relevant Pages

  • Re: remove local admin rights
    ... I have set up a policy to make all domain users Local Admins - I ... users have remained in the local Admin group... ... Double-click Startup, click Add ... Restricted groups are useful sometimes but I'm old fashioned and prefer the ...
    (microsoft.public.windows.group_policy)
  • Re: Dmin group member ship keeps disappearing.
    ... You either have Restricted Groups enabled in the domain or are using a Group ... Policy shutdown script to manage membership of the administrators group. ... > couple of computers and adding admins to the local admin account. ... > fine for the local user I added ...
    (microsoft.public.windowsxp.security_admin)
  • help with use of restricted groups and individual rights assigment
    ... accounts to admin group on the workstations. ... How do i continue using GPO restricted groups but separately grant ...
    (microsoft.public.win2000.group_policy)
  • Re: Revoke local admin rights
    ... All the users are Domain Users, and so if they roam to a PC where there ... Admin privileges anyway, it's the fact that they are admins on their local ... Cheers, Martin H. ... > Take a look at the Restricted Groups GPO. ...
    (microsoft.public.win2000.group_policy)
  • Re: Loginscript is lacking credentials.........
    ... Create the gpo in the ou where the Computers reside, ... right click on restricted groups and select new group (For the local ... machine is a member of the local administrators group him/herself, ... I was under the impressions that all GPO's ran with top admin credentials. ...
    (microsoft.public.windows.server.active_directory)