Re: Group Policy issue - restricted groups
- From: "Tim Chin" <donotemail>
- Date: Wed, 6 Jun 2007 11:11:26 -0500
Yes, there is a way to preserve the existing group's membership by appending
vs. replacing. The difference is the method used to define Restricted
Groups. What you should do is 'Add Group' to Restricted Groups, browse out
for your domain admins group, 'OK', and hit 'Add...' at 'This group is a
member of:' section, and type 'Administrators'.
This method, however, will not let you place the local administrator into
the 'Administrators' group. I didn't know that it was possible to remove
the builtin administrator account from the administrators group.
Regardless, you'd probably need to use a script of some sort to issue a 'net
localgroup administrators [domain\]user /add' command. Such a script would
actually satisfy both of your requirements.
I hope this helps.
Tim
"m-m" <dollar.yen@xxxxxxxxx> wrote in message
news:1181144759.926244.144250@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hello everybody,
I am setting up the local administrators on our network through group
policy (making sure the local admin as well as domain admins are local
administrators on each machine).
However, on our network, each individual user is also set up as a
local administrator on their own computer.
Is there a way to preserve this setting? It doesn't seem like the
restricted groups allows me to keep each user as a local admin while
adding the other users as admins.
Thanks!
.
- Follow-Ups:
- References:
- Group Policy issue - restricted groups
- From: m-m
- Group Policy issue - restricted groups
- Prev by Date: Re: AD Through Firewall & Trusts
- Next by Date: Re: AD to ADAM Syncronization with ADAMSync data extraction and redundency
- Previous by thread: Group Policy issue - restricted groups
- Next by thread: Re: Group Policy issue - restricted groups
- Index(es):
Relevant Pages
|
