Re: Removing a user from Domain Admins

From: Christian Schindler (christian.schindler_at_ntx.at)
Date: 02/06/04 

Date: Fri, 6 Feb 2004 20:19:05 +0100

Dave,

First: You could centrally add the cadman user to the local administrators
group
on all machines via Group Policies. Just use the "Restricted Groups"
feature.

Second: You should determine what causes the custom acad intall to screw up.
Isn't there something like an ACAD Knowledge Base?
Have you tried to do an install as local administrator and then work with
this installation?

Christian

"Dave K" <anonymous@discussions.microsoft.com> wrote in message
news:bdb701c3ecde$f2a5c1b0$a401280a@phx.gbl...
> I need to backpeddal. I joined an architectural firm
> with a ghastly AD structure. In the domain admins group
> there is me and a user I don't want there "cadman" (cad
> manager). I was told they originally did this so that
> the cad managers could install/modify the autocad
> installations on each pc. They figured why not make
> cadman a domain admin and be done with it? Call me
> crazy, but I don't feel comfortable with the thought that
> the 10 different cad managers (plus some regular users
> who happen to have the password for cadman) are able to
> do whatever they want on my network. Now if I remove
> cadman from domain admins then the account they love to
> use can no longer install/modify autocad. And with 180+
> computers I really don't want to manage each computer
> individually and add cadman to the local administrators
> group. I also can't have them logon as the local admin
> (which would solve my problem), something about it screws
> up our custom acad installs. They would also freak out
> when they got prompted to supply credentials for network
> shares they're used to using. Any ideas or suggestions
> would be greatly appreciated. Thanks in advance! Dave.

Relevant Pages
Loading