Re: Restricted groups GPO deleted but still applying to WS's...

I'm seeing the same thing concerning the restricted groups GPO wiping
out all the local admin accounts. I need to know how to assign groups
to the local admin group on a workstation without the existing members
getting removed.

Isaac Story wrote:
> I started using the restricted groups GPO to add a domain group to local
> admin accounts on workstations and it had an unforseen consequence. It
> replaced all local administrator account membership on every workstation.
> This was bad since we have a small handful of users that need admin rights to
> thier workstations only. So I removed that GPO and fixed these users that had
> thier rights taken away. Now for some reason there are a couple workstations
> that still appear to be applying the GPO when it doesn't even exist. Has
> anyone ever seen this? or, is there a recommended method to diagnosing this
> problem? I found the KB on viewing the group policy application history in
> the registry, but the data in the registry doesn't really make any sense or
> help me at all.

.

Relevant Pages

  • Re: How do manage your workstations?
    ... if I’m just doing a handful of workstations. ... Only grant users local admin privileges if your employer can ... Maybe there is remote installation system that push program updates ... They that can give up essential liberty to obtain a little temporary ...
    (microsoft.public.windowsxp.general)
  • Re: Strange Local Rights Problem
    ... You wouldn't be confusing Local Admin rights with Domain ... > sitting at workstations tweaking things. ... > Does that Linux web server have an entry in the DNS server on the SBS? ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Norton Liveupdate
    ... user is a member of the power users group, ... the user should be a local Admin to perform the ... >> to update all of our Workstations on the users next ... >> user or administrator of the local system. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Strange Local Rights Problem
    ... No, I'm certainly not suggesting that it is a best practice, nor do I think ... workstations the local admin assignment seems to be a necessity ... >>> respective client workstations. ...
    (microsoft.public.backoffice.smallbiz2000)
  • Password management WAS: local admin compromised
    ... Subject: Password management WAS: local admin compromised ... >local Admin accounts do not share their passwords with any ... passwds be different from each other as well as the domain? ...
    (Focus-Microsoft)
Loading