Re: Local Administrators

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

You could create a gpo for this ou and make these users members of the local
admin group via the use of restricted groups. Everytime the gpo is
processed the membership of the groups is refreshed to reflect the
definition put forth by this policy.

There is a good article on this at:
http://www.windowsecurity.com/articles/Increasing-Security-Limited-User-Accounts-Restricted-Groups.html

--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.


"Daniel Mone" <Daniel Mone@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:63ADC404-79DA-4EA4-9EC1-5FA365CEA643@xxxxxxxxxxxxxxxx
> Hi
>
> I'm trying to set up a policy that will allow our helpdesk members to be
> local admins on workstations in a certain OU. Is this possible, or do
> they
> have to be added into the local admin group on each PC manually?
>
> Thanks


.

Relevant Pages

  • Re: Restricted group policies
    ... defines the domain members of a local group (the local group members ... using the type of domain-level restricted group policy we ... I did this recently to put a couple local accounts into a specific admin group but to only have that apply on those servers. ... I had an admin group specified with certain domain accounts at a domain level but for a couple servers we had to also have a couple local accounts in the admin group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: No local admin accounts
    ... and then log in with the disabled built-in Administrator ... account. ... > did not make them members of the admin group. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: To deteremine NT logins + Sql Logins with sa + dbo + prviliges
    ... Id like to drill to the lowest level where i can> get all members of the domain\domain admin group too without asking the n/w> team for assistance. ... >>> I have an NT login that I guess is part of some NT group thats a valid ...
    (microsoft.public.sqlserver.security)
  • No local admin accounts
    ... I built a computer for my aunt and uncle. ... did not make them members of the admin group. ... of the local users that are active are memebers of the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: To deteremine NT logins + Sql Logins with sa + dbo + prviliges
    ... sure you have to be an admin to enumerate the members in a domain group. ... Win32 functions related to Windows NT accounts and groups. ... the same time my book on SQL Server Security comes out, ... > and found domain\domain admin group.. ...
    (microsoft.public.sqlserver.security)