Re: Making domain account as Local Administrator

Hi
You can also use script to net localgroup
net localgroup GroupName /add Domainname\username

for restricted groups check:
Description of Group Policy Restricted Groups

http://support.microsoft.com/Default.aspx?kbid=279301

Updates to Restricted Groups ("Member of") behavior of user-defined local
groups

http://support.microsoft.com/default.aspx?kbid=810076




--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator

"Ram" <Ram@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:12F76B81-B71B-4CAC-855F-615DD2914A43@xxxxxxxxxxxxxxxx
I want to make a domain account as local administrator for a few machines
for installing and removing software and hardware on them.
Using restricted groups of the GPO linked to the machines OU, I made him
as member of the administrators group. Did I give this account more
privileges than required? Please suggest the best solution?

Regards
Ram



.

Relevant Pages

  • Re: Maling a domain group member of Local Group
    ... > You can use a Group Policy "startup" script using the net localgroup ... You could make the domain global group the restricted ... > group and specify the localgroup in "this group is a member of" at the OU ... > level with a GPO configured with restricted groups and add the computers ...
    (microsoft.public.win2000.security)
  • Re: Power User Setting Not Saved
    ... included in the Restricted Group via this group is a member of. ... power users along with the specific user you added. ... Restricted Groups to speed up propagation of any changes first run gpupdate ... move it to an Organizational Unit that would not have that Group Policy ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Power User Setting Not Saved
    ... included in the Restricted Group via this group is a member of. ... power users along with the specific user you added. ... Restricted Groups to speed up propagation of any changes first run gpupdate ... move it to an Organizational Unit that would not have that Group Policy ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Power User Setting Not Saved
    ... when I say "local user" I mean the login name that is typically used ... user that is a member of that OU then be a Power User? ... There are two ways to do Restricted Groups - members of this group or this ... membership of the Restricted Group [power users in your case] will be ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Restricted Groups
    ... member of the Local Power Users group. ... because restricted Groups policy is a computer policy. ... admin group access to, OR is this where I click on the local admin group? ...
    (microsoft.public.windows.server.active_directory)