RE: How do I use group policy to remove unnecessary users ?

Thank you Vikram Thakur,

Your answer solve half of my problem.I'm steel searching for a solution to
remove unnecessary local users from workstations by GPO or scripting.

Thanks again

"Vikram Thakur" wrote:

> Use the 'Restricted Groups' policy setting using GPO.
>
> http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_scerestrictgroups.mspx
>
> This will remove unwanted people from Groups and control its membership.
>
> - Vikram Thakur
>
>
> "Bijan Kianifard" wrote:
>
> > Hi,
> >
> > I have a windows 2003 Active Directory domain with a number of work
> > stations.Some of these workstations recently have been joined to
> > domain.Before they were member of another domain and the administrator of
> > that domain had added some users to some of local groups of these
> > workstations.Also some of my domain users have been added to this groups(like
> > Power Users and Administrators) and there are some local users created on the
> > workstations that is not needed anymore.I want to clean these computers
> > centrally instead of going to each workstation and doing the job.
> > How can I use group policy to remove unnecessary users and clean local
> > groups of domain workstations?
> >
> > Thanks in advance,
> > Bijan
.

Relevant Pages

  • System Account
    ... those domain security groups are part of the local users ... group on the workstations. ... The System account has full control to ... install such garbage as the google search bar or n-case or ...
    (microsoft.public.win2000.file_system)
  • Re: How to get local account lockout status over network?
    ... > workstations, not in a AD domain by design. ... > controllers to see whether an account is locked out or not. ... You can access Local Users and Groups there. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: restrict local users totally
    ... accounts that reside locally on the workstation. ... >be any local users, because it's a domain controller. ... >workstations connecting to it can have local or domain users. ...
    (Security-Basics)
  • Re: Time and date lock
    ... I do not believe these domain users are local users of any type ... > They have to be local administrators on the machine to do it. ... >> The users are not local users of the workstations, but log on to their XP ...
    (microsoft.public.security)
  • Re: RE: loopback group policy
    ... merges the settings on the Computer GPO with the Users GPO ... all explicit in the Help Section of the Loopback GPO) ... GPO's then it will still affect any workstations below it. ...
    (microsoft.public.windows.server.active_directory)
Loading