Re: Add a local user in a Restricted Group GPO

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 07/22/04 

Date: Wed, 21 Jul 2004 17:58:28 -0700

"Javier Inglés [MS MVP]" <jjingles2000@NOSPAMhotmail.com> wrote in message
news:uig$NK3bEHA.2408@tk2msftngp13.phx.gbl...
No, you can't

But you can try with one GPO in the start-up login of the computer with one
bat:

Net Localgroup Administrators
  "Localuser" /Add 

-- 
Salu2!!!
Javier Inglés, MS-MVP
http://mvp.support.microsoft.com/default.aspx
Policy enforcement of the Restricted group definition
will make that addition to the local group only temporary.
-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Michel Lapointe" <a@microsoft.com> escribió en el mensaje
news:%23h5pz6zbEHA.2660@tk2msftngp13.phx.gbl...
> Hello,
>
>     Is it possible to add a local user inside a Restricted Group?
>
>     The problem is that I have a GPO which enforce the membership of the
> Administrators group, but I have an application that can't use a Domain
> Account to do is work. Therefore I can't add a local user manually in the
> Administrators group, and don't see a way to add a local user in the GPO
>
>     Any suggestions?
>
> Thank
>
> ML
>
>

Relevant Pages

  • Re: Help needed setting up roaming administrator
    ... >Administrators group (just type in Administrators, don't browse for it, ... >add your Roaming Local Admins group to the Members of this group section ... GPO associated with the OU that contains the computers I want to use ... restricted group and to define the groups the restricted group will ...
    (microsoft.public.win2000.security)
  • Re: Domain Users to have Local Admin rights
    ... members inside the Restricted Group, but it still doesn't wanna work. ... all machines that are with scope of the GPO carrying the Restricted ... their local Administrators group. ... group you define a Restricted Group definition, ...
    (microsoft.public.windows.server.security)
  • Re: Add a local user in a Restricted Group GPO
    ... But you can try with one GPO in the start-up login of the computer with one bat: ... Is it possible to add a local user inside a Restricted Group? ... > Administrators group, but I have an application that can't use a Domain ... > Administrators group, and don't see a way to add a local user in the GPO ...
    (microsoft.public.windows.group_policy)
  • Re: group policy settings is not removed after computer is removed from OU
    ... Now I moved the computers to another ... administrators group of those computers, I am still seeing those users ... As I mentioned, I used the restricted group setting in the GPO, not ...
    (microsoft.public.windows.group_policy)
  • Re: Add a local user in a Restricted Group GPO
    ... The problem is that interface validate the user account, ... directly in the policy file you can add COMPUTERNAME\ACCOUNTNAME and it will ... This may cause problem if the GPO is executed on computer for which the ... Is it possible to add a local user inside a Restricted Group? ...
    (microsoft.public.windows.group_policy)