Re: Restricted Groups Problem

I believe the easiest way would be to re-enable the restricted groups
setting, adding in domain admins.

Just a note for next time--you don't want to make many settings at the
domain level--this will affect your domain controllers and every user,
including the administrator account.

Good luck

Ken

"exchangerookie1994" <exchangerookie1994@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:6776EA11-EDFB-463A-9E17-1DBFF94D149D@xxxxxxxxxxxxxxxx
>I implememented a GPO and set up restricted groups for Domain Admins, and
> the admistrators group at the domain level. I modified the default domain
> policy. I added administrator and a BackupExec service account to both
> groups under memebers of this group. A few days later I notice everyone
> that used to be admin on their PC no longer has Admin rights and the
> Domain
> Admins group is no longer in the local Administrators group on any of my
> XP
> machines. I have since deleted the restricted groups setting in the
> default
> domain policy. How can I add Domain Admins back in to Local
> administrators
> group on all XP machines as quickly as possible?
>
> Thanks for your Time
>


.

Relevant Pages

  • Re: C$
    ... > On Win2k Network with XP machines, if you are an administrator on the ... If it is a domain environment, all domain admins can fully access all ...
    (microsoft.public.windowsxp.security_admin)
  • Re: script to list users and groups in domain admin and local admi
    ... >> Domain admins membership can be determined easily enough in Active ... >> using the net command and such to enumerate local administrators. ... If you want to use Restricted Groups ... >>>I am looking for a script or guidance to write a script that will list ...
    (microsoft.public.win2000.security)
  • Re: Restrict User Creation - Administrators/DomainAdmins/EnterpriseAdmins
    ... One thing about Restricted Groups that gets a lot of people when doing this for the first time: make sure to include Domain Admins. ... Please be advised that - out of the box - that the Restricted Groups GPO will flush the members of your 'focus group' and then populate it with what you specify. ... Do this on a WINXP / WIN Vista / Member Server box with the appropriate 'Admin tools' installed. ... Delegation is about taking a group of users (create a Security Group ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security on single forest domain design
    ... Here is where I mention Restricted Groups and here is where Paul mentions ... The problem with the startup script is that it does not prevent other ... Domain Admins and Schema Admins. ... the local group Administrators on each member workstations or servers, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restricted Groups Problem
    ... Just create a restricted group for administrators and assign Domain Admins ... I have since deleted the restricted groups setting in the ... > group on all XP machines as quickly as possible? ...
    (microsoft.public.win2000.group_policy)
Loading