Re: Local security group

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Well, this sort of depends on just what environment you
have and what you mean by changing them all to the
restricted local security rights.
If you have a domain, then using a Restricted Group
definition in a GPO linked to OU containing the client
machines
In this GPO
1. use the policy to rename Administrator, such as to Donkey
2. define Administrators as a Restricted Group that has
as its members Domain Admins, and Donkey
Then, no domain or machine local accounts would be
members of Administrators on machines in that OU once
the GPO applied.
Now, I assume that they are all already members of Users
on those machines so that this would them leave them as
limited users (i.e. members of at most Users group)

Roger
"Mark Bowles" <MarkBowles@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A85FDACD-52CA-41BF-A608-2E8FC62201B9@xxxxxxxxxxxxxxxx
I have a client we have been testing restricted user local rights with all
of
there apps and it went well. I would like to use a group policy to change
all
the workstations and their respective users to the restricted local
security
group. Can I do this using a group policy?

Thanks


.

Relevant Pages

  • Re: Restricted Groups Not Working
    ... 2:Please bear in mind that 90% of the policy is applying it only seems to be the restricted groups section that isnt taking effect and 'allow to load and unload device drivers' which also doesnt seem to be working. ... Also all machines are running SP2 and with the latest hotfixes as provided by our SUS server. ... When adding users to the "Administrators" group, remember that you can't browse for that group, you have to type "Administrators". ... In the "Members of this group", browse for the "Global Security Group" created in Step 1. ...
    (microsoft.public.windows.group_policy)
  • Re: Active Directory computers
    ... They only have the concept of a workgroup, you just specify the domain for the workgroup. ... Members of a domain NEED the actual computer accounts to establish the trust connection. ... Joe Richards Microsoft MVP Windows Server Directory Services ... I have a few win98 machines that required simple production functions... ...
    (microsoft.public.win2000.active_directory)
  • Re: Script to enumerating list of Local Admingroup member of all domai
    ... Administrator as members of machine local Administrators ... group on all machines, just define this as a Restricted Group ... domain admins and local administartor account from the computer. ...
    (microsoft.public.windows.server.scripting)
  • Re: Pinball Alliance Charlotte NC
    ... It could start with a little club and build. ... The members would "share" the machines. ... out their prized games to someone they barely know or trust. ...
    (rec.games.pinball)
  • Re: Pinball Alliance Charlotte NC
    ... for pinball machines. ... The members would "share" the machines. ... out their prized games to someone they barely know or trust. ...
    (rec.games.pinball)