Re: Help with local adming rights on workstations

There was a patch somewhere along the way that would make the RG policy
additive. I don't recall the number that fixes this, but I know one's out
there. Someone on here definitely has the number if you can't find it in
the MSKB.

Ken

"Denis Wong @ Hong Kong" <H_O_T_A_P_P_S_@xxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:us8q3pgoFHA.764@xxxxxxxxxxxxxxxxxxxxxxx
> Hi,
>
> Can you separate your computer objects in different OUs linking to
> different
> GPO w/ RG?
>
> br,
> Denis
>
> "TechMasters" <kiosk@xxxxxxxxxxx> wrote in message
> news:n031g1hg4hu288dsq78mq0n7f4f65d901t@xxxxxxxxxx
>>
>> I am currently controlling admin privileages on local AD workstations
>> by using Restricted Groups, however I have a need in a particular area
>> to explicitly and individually add select users to the local machine
>> admin group, which prevents me from using RG (unless I create a ton of
>> GPOs)
>> I still would like to use RG to add my management groups consistently
>> to the local admin group on the machines, but using RG will erase any
>> manual additions to the local admin group. any ideas? I have too many
>> desktops to do this manually (over 4000)
>
>


.

Relevant Pages

  • Re: Smart user removing domain admin group from local admin group
    ... Also note the Restricted Group Policy will clear every existing ... > change the group membership after GPO application, ... > the local admin group, the membership will refresh every time the GPO is ...
    (microsoft.public.win2000.active_directory)
  • Re: Help with local adming rights on workstations
    ... This KB article describes how to ADD domain groups or user accounts to local ... > to explicitly and individually add select users to the local machine ... > to the local admin group on the machines, but using RG will erase any ... > manual additions to the local admin group. ...
    (microsoft.public.win2000.group_policy)
  • Script works / but fails on startup
    ... then add the admin group for that OU to the local admin group on the ... Administrators group is " & strAdminGroup ... 'Check if the user is already a member of the local admin group ...
    (microsoft.public.scripting.vbscript)
  • Scheduled Task will not run on Win2K3 Server (Ent Edition)
    ... control on the folders where the application is stored. ... The local admin group also has full control on the ... Registry key that the application created to store ...
    (microsoft.public.windows.server.general)
  • Re: Lost Internet access after added in admin group
    ... Are running ISA Firewall Client on the computer? ... you ping websites when you move the user to Local Admin Group? ... I added a domain user to the admin group of a local PC ... > domain user to the local admin group I lose Internet access. ...
    (microsoft.public.backoffice.smallbiz2000)