Re: Local Admin & Group Policy Question

Hi,

Jerold Schulman schrieb:
> NOT with Group Policy Restricted Groups.

It is. You can add your wanted group to the existing one
without replacing it.

In the restricted group you add first your wanted group
and make them "This group is member of" Administrators

If you do it the other way, add the Administrators to the
restricted group and make them "Member of this group"
(your desired group) it will work replacing.

> But since your users are local admins (how else could they
> emove Domain Admins?)they can remove it eacxh time.

Thats in fact a problem, but every 16 hour the security policy
will be applied via "force" and will correct that.

Some time later, the local admins should get tired, to edit
this setting every morning ... :-)

Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
W2K FAQ : http://w2k-faq.ebend.de
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.
.

Loading