Local Group Policy Filtering: Not Applied (Empty)

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: wenj (wjuhl_at_optonline.net.nospam)
Date: 02/14/05 

Date: Mon, 14 Feb 2005 08:43:06 -0800

I have a test OU with one workstation in it. I log into this workstation
with a normal user account, not an administrative one. The GPO simply adds a
global group to the local Administrators group on the workstations in the OU.
 This was done with a GPO using Computer Configuration\Windows
Settings\Scripts\Startup. The User portion of the GPO is disabled. The
Script Name is net, and the Script Parameters reads:
     
localgroup administrators "domain_name\Desktop Support NY All" /add

In the past, I have successfully applied another GPO to this OU that is
identical with the exception of the group to be added, although it is no
longer linked to the OU.
When I run gpresult, it states that this GPO was applied, but the group does
not show up in my local Administrators group.
There are only the Default Dom/Dom Controller policies in the environement -
no loopback, no filtering, no override, etc. Just plain vanilla.
Any ideas? Thanks!

Relevant Pages

  • Re: Local Group Policy Filtering: Not Applied (Empty)
    ... There should be a net at the start, as the command is net localgroup. ... I log into this workstation with a normal user account, ... The GPO simply adds a global group to the local Administrators group on the workstations in the OU. ... When I run gpresult, it states that this GPO was applied, but the group does not show up in my local Administrators group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Managing employee access to client networks
    ... added to the workstation local administrators group. ... to our system and to our clients systems. ...
    (microsoft.public.windows.server.sbs)
  • Re: Add Domain Admin to local XP Admin group
    ... if you mess with RGP you can easily wipe out the DA from local ... Administrators in a given workstation or in all Workstations. ... members of the local Administrators group of the machine by default. ...
    (microsoft.public.windows.server.active_directory)
  • Re: I want to Prevent Users from removing workstation from domain
    ... The only way is to remove their ability at the workstation. ... Configure a GPO for it. ... Only with administrators group, but I want to Prevent Users from removing ...
    (microsoft.public.windows.server.active_directory)
  • Re: Help needed setting up roaming administrator
    ... >Administrators group (just type in Administrators, don't browse for it, ... >add your Roaming Local Admins group to the Members of this group section ... GPO associated with the OU that contains the computers I want to use ... restricted group and to define the groups the restricted group will ...
    (microsoft.public.win2000.security)