Re: How to define local groups in an AD computer policy?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance


I am sorry but I don't understand.

"Not 44"?

what is "Restricted Groups"?

"Tomasz Onyszko" wrote:

> schmeckendeugler wrote:
> > Greetings.
> >
> > I have an active dir. with server 2003. I have created a policy that
> > restricts "allow logon locally". however I suspect that it's affecting
> > services running on various servers.
> >
> > How do I specify "local accounts" to be able to logon locally /
> > interactively? I guess my real question is, "How do I define local users &
> > groups in an AD GPO?"
> >
>
> The answer is not 44 but use Restricted groups in GPO to define
> membership in local groups.
>
>
> --
> Tomasz Onyszko
> http://www.w2k.pl
>
.

Relevant Pages

  • Re: TS Configuration Permission
    ... This was a GPO at a higher level OU. ... > An about the Licensing Server: did you install permanent TS CALs ... There are no restricted groups in the domain. ... >> The licence server appears to be issuing temporary licences ...
    (microsoft.public.win2000.termserv.clients)
  • Re: Domain Administrator have lost all rights
    ... > I'm pretty sure you can't remove the default domain controller's GPO. ... >>Thanks but I have deleted all GPO's and restricted groups and restarted the ... >>server but the Domain Admin access is still restricted. ... >>that have administrator Full control permissions, ...
    (microsoft.public.win2000.active_directory)
  • Re: Restrict logon across OU
    ... Craig Forhan ... "Tomasz Onyszko" wrote: ... > Create a GPO at each site and use restricted groups to st up who can log ...
    (microsoft.public.win2000.active_directory)
  • Re: Want to add users to their local Admin group
    ... > Above assumes adding user to Administrators group on more than one PC. ... > operation on more than on PC, I think we should use GPO here. ... Restricted groups would be great if we could ... PC-1 with user Joe, PC-2 with user Mary, and PC-3 with user Peter. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restricted group functionality
    ... GPO that affects the computer side of things you would have to make sure ... that the computer account objectin question are located in an OU (well, ... we are targeting the administrator group. ... making use of the Restricted Groups can be a bit more difficult than ...
    (microsoft.public.windows.group_policy)