AD - permissions on the network

Tech-Archive recommends: Speed Up your PC by fixing your registry

is it possible to configure a script, gpo, or push something through
AD, ldap, that will remove all permissions from the local
administrators group of the machine and replace it with ones I want on
there.



Basically we do not allow users to have local admin rights for obvious
reasons. Instead we give them power users. "Somehow" I am seeing
more and more that either the domain users group or the actual user is
being applied to the local admin group of the computer.



Im sure it happens over there but some morons who work here have our
admin password and their way of solving permissions/problems is just
giving the users local admin rights! Frustrating!

.

Relevant Pages

  • Re: Give Domain Users Local Admin Rights
    ... I know that I could add the indivdual domain user to the ... they do not have local admin ... >> I added DOMAIN USERS to the local administrators group ... >> are logged on to without giving them Local Admin rights ...
    (microsoft.public.windowsxp.security_admin)
  • Re: delegate admin rights to an user in an OU
    ... - install programs that need local admin rights ... administrators group on every client (with indirect I mean, ... admina member of an AD group and configure that AD group to be a member ...
    (microsoft.public.windows.server.active_directory)
  • Re: delegate admin rights to an OU
    ... - install programs that need local admin rights ... administrators group on every client (with indirect I mean, ... admina member of an AD group and configure that AD group to be a member ...
    (microsoft.public.windows.group_policy)
  • Re: Trouble installing KB840374
    ... "Paul L Fisher" wrote in message ... >> Looks like a permissions issue, because the installer tries to back up ... >> What happens if you try domain admin vs. Local admin account? ...
    (microsoft.public.windows.server.general)
  • Re: NTFS Security
    ... restrict access to data on USB sticks to users of your domain by setting ... NTFS permissions? ... but you can access it by taking ownership. ... > the local admin from another domain/workgroup from accessing the data. ...
    (Focus-Microsoft)