Re: Making domain account as Local Administrator

No. That's the right solution,
Anthony


"Ram" <Ram@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:12F76B81-B71B-4CAC-855F-615DD2914A43@xxxxxxxxxxxxxxxx
I want to make a domain account as local administrator for a few machines
for installing and removing software and hardware on them.
Using restricted groups of the GPO linked to the machines OU, I made him
as member of the administrators group. Did I give this account more
privileges than required? Please suggest the best solution?

Regards
Ram



.

Relevant Pages

  • Re: Global Account for Installing Software
    ... You could create a sub-ou within the main ou for these machines and use ... restricted groups to delegate a subadmin to manage these machines. ... If you want them to be local admins so they can perform maintenance than you ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Machine Rights thru Group Policy
    ... You may want to look into using Restricted Groups to use at the OU level to ... enforce membership of local groups on computers in that OU. ... to those OU machines power users on any machine in that OU they logon to. ...
    (microsoft.public.win2000.group_policy)
  • Re: Local Machine Rights thru Group Policy
    ... >You may want to look into using Restricted Groups to use ... >administrators/power users groups on ALL the machines in ... >administrators group and perhaps "domain users or a newly ... >be in the power users group which would then make all the ...
    (microsoft.public.win2000.group_policy)
  • Re: localgroup administrators
    ... In most cases where I have implemented restricted groups it has lasted a little while and then someone comes up and says, hey we want Bob to be a local admin on these 5 machines and not the rest and alice to be local admin only on her machine, etc.. ... if poster simply wants to reset the membership ...
    (microsoft.public.windows.group_policy)
  • Re: Need to fix Local Admin rights problem
    ... You'd have to use Restricted groups to take out the riff-raff, ... instances of restricted group policy objects and appropriate OU structures ... When the techs setup the machines they add domain\users ... remove local admin rights yet but I would at least like to take one step. ...
    (microsoft.public.windows.group_policy)