Re: restricted groups

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: smooredhs (smooredhs_at_newsgroup.nospam)
Date: 09/24/04 

Date: Fri, 24 Sep 2004 09:49:43 -0700

Yep, it was you :)

Steve

"Cary Shultz [A.D. MVP]" <cwshultz@mvps.org> wrote in message
news:uxQjHwUoEHA.324@TK2MSFTNGP11.phx.gbl...
> Good morning,
>
> I believe that I told you this and gave you the link to the article?
>
> If it was not me, here is the link to the MSKB Article - just in case!
>
> http://support.microsoft.com/?id=810076
>
> HTH,
>
> Cary
>
>
>
> "smooredhs" <smooredhs@newsgroup.nospam> wrote in message
> news:%23zAhBGOoEHA.3760@TK2MSFTNGP12.phx.gbl...
> > Someone told me Microsoft has a patch for Win2K and WinXP workstations
> that
> > modifies how restricted groups behave, so changes are additive instead
of
> > overwriting things. I haven't looked into this, but this is exactly why
> we
> > didn't use that feature. Instead we bought a third party product to
push
> > out changes to the local administrators group (for existing machines),
and
> > modified our PC build standards to ensure specific global groups are
added
> > in there.
> >
> > "brenda" <anonymous@discussions.microsoft.com> wrote in message
> > news:003f01c4a0b8$a12a5830$a301280a@phx.gbl...
> > > I'm using the restricted groups option to enable my help
> > > desk people to administer workstations within the
> > > domain. It works well for that purpose. However, I also
> > > have a handful of users who need to be able to have
> > > administrative rights to their own computer, yet none of
> > > the others within the domain. I can add their account to
> > > the administrators group on the PC, but it gets wiped out
> > > each time one of the servers reboots. I could
> > > create "computer" OU's for each department but would run
> > > into help desk restrictions each time they add a computer
> > > to the domain. Need a little push.............
> > >
> > > Thanks
> >
> >
>
>