Re: localgroup administrators



Is your Domain Win2k? You could use a restricted groups policy, but I'm not sure that it works on Windows 2000.

Here is an article that implies that it does
http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

"Yvonne" <Yvonne@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:9E361D06-C8E1-410E-92CE-EEC9C5BE98C3@xxxxxxxxxxxxxxxx
I need to set a group policy to remove domain users and only add domain
admins to local group administrators on workstations. Mixed xp and 2000
environment. W2k3 server. I am trying to use net localgroup administrators
/add and /delete.
Using a startup script with only test computers having read access. What
variable can I use for the domain users, and will this work? Is there a
script for this?

.


Loading