Re: Forcing groups into the local admin account

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Erik (erik.anderson_at_gte.net)
Date: 02/29/04 

Date: Sat, 28 Feb 2004 21:09:16 -0800

Does this remove the local Administrative account for the
machine as being part of the local Administrators group?
I've tried to add this user "Administrator" or whatever
the laocal admin account is and its not in the list of
users to choose from.
Thanks for the help.
>-----Original Message-----
>If I have read your post correctly, yes, this can be done
>provided that you want to control precisely the
membership
>of the Administrators group on the machines within the
scope
>of the GPO that you use. That is to say, you will need
to state
>exactly what should be in Administrators, and then that
is how
>it will be, with the only way to change it being
changing the GPO
>or taking the machine out from the scope of the GPO.
>If this fits, then you should look into using Restricted
Groups
>to define the local Administrators group membership,
using
>an GPO that is linked to an OU
>
>"Erik" <anonymous@discussions.microsoft.com> wrote in
message
>news:2f6801c3fcf5$bd22d6f0$a401280a@phx.gbl...
>> Is there a way to change, a machine on the domain,
local
>> administrative groups permissions? I would like to add
>> domain groups to a machines local admin group via GPO.
I
>> would also like the new permissions to replace the
>> current permissions except for the local admin
account. I
>> this possible with a GPO? I have users that will add
>> individual user accountsor groups to their machines to
>> allow temp accessand then forget they were added.
>>
>> Thank!!
>
>
>.
>

Relevant Pages

  • Re: Adding Local Admin Accounts Using GPOs
    ... account to be used exclusively on the server, ... to remove all users from being local administrators on their machines. ... Notepad, pasted the text for the script, and saved it as AddUser.vbs (see ... I created a test OU and created the GPO policy where: ...
    (microsoft.public.windows.server.sbs)
  • Re: Administrators Group in Local Users and Groups
    ... Create the gpo in the ou where the Computers reside, ... > administrators group, but it won't let me browse outside the active ... >>> I am trying to find out how to add in the domain group Account ... >>> each workstations administrator group. ...
    (microsoft.public.windows.server.active_directory)
  • RE: No users in Local Administrators Group
    ... that it is succesful. ... even when in the context of the local administrators ... If I attempt to add an account to the group that I know is in there ... administrators group and this returns no results. ...
    (microsoft.public.windows.vista.security)
  • Removing local users from local administrator group
    ... I am rolling out a GPO with software restriction settings, ... how can I bulk remove users from the local administrators group and ...
    (microsoft.public.win2000.group_policy)
  • No users in Local Administrators Group
    ... When attempting to view the members of the local administrators group I see ... even when in the context of the local administrators ... If I attempt to add an account to the group that I know is in there ...
    (microsoft.public.windows.vista.security)