Help with local adming rights on workstations

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: TechMasters <kiosk@xxxxxxxxxxx>
Date: Mon, 15 Aug 2005 08:57:46 -0400

I am currently controlling admin privileages on local AD workstations
by using Restricted Groups, however I have a need in a particular area
to explicitly and individually add select users to the local machine
admin group, which prevents me from using RG (unless I create a ton of
GPOs)
I still would like to use RG to add my management groups consistently
to the local admin group on the machines, but using RG will erase any
manual additions to the local admin group. any ideas? I have too many
desktops to do this manually (over 4000)
.

Follow-Ups:
- Re: Help with local adming rights on workstations
  - From: Steven L Umbach

Prev by Date: Re: Registry settings management for 16 computers through Group Po
Next by Date: Re: Applying XP group policy setting in Windows 2000 Active Direct
Previous by thread: ADM templete for autologon
Next by thread: Re: Help with local adming rights on workstations
Index(es):
- Date
- Thread

Relevant Pages

Re: Newbie question on User Priveleges
... The problems on the client are broad: We added an existing a machine (from ... > make the user a local admin on the machine...not a domain admin ... > We've recently stood up SBS2003 in a small and standard configuration. ... > local machine) where the database resides. ...
(microsoft.public.windows.server.sbs)
Re: local users and groups
... The copying of the local account is possible as is the use of a boot disk ... you mentioned an Accounts Operator group on the local machine? ... >> we then made him a power user and reset the admin password ...
(microsoft.public.win2000.general)
Re: exdeploy dsscopescan problem
... it is a small lab testing setup so it is very simple - one wins dns server ... resolve machine names and domain names backwards and forwards and, ... >> service admin rights to all exchange site and configuration levels and to ... >> usrmgr on the local machine, the account in the administrators group says ...
(microsoft.public.exchange.setup)
Re: Javascript problem after installing SP2
... > The admin site of my website is setup so that when I add a new product, ... > can browse to a photo on my local hard drive to upload. ... If you are affected by local machine lockdown ...
(microsoft.public.windowsxp.general)
Re: exdeploy dsscopescan problem
... Since you said you can add the account to ... > includes the exchange server i cannot connect to via exdeploy ... > service admin rights to all exchange site and configuration levels and to ... > usrmgr on the local machine, the account in the administrators group says ...
(microsoft.public.exchange.setup)