Site Policies and Domain Controllers

From: JayDee <dopamine@xxxxxxxx>
Date: Tue, 25 Sep 2007 18:51:45 -0700

We would like to create a site policy that adds a domain global group
to the local administrators group of all servers on a specific subnet,
since we will have a local group supporting them... however, there is
a domain controller on one of the subnets. Is there any way to set up
our "restricted groups" policy on all servers without giving those
admins administrator access to the entire domain??

Thanks!

- jd

.

Follow-Ups:
- Re: Site Policies and Domain Controllers
  - From: Florian Frommherz [MVP]

Prev by Date: ifmember.exe bat script fails due to perms...
Next by Date: Re: Types of ICMP Used by DC?
Previous by thread: ifmember.exe bat script fails due to perms...
Next by thread: Re: Site Policies and Domain Controllers
Index(es):
- Date
- Thread

Relevant Pages

Re: Site Policies and Domain Controllers
... to the local administrators group of all servers on a specific subnet, ... You could try to create the Group Policy linked to the site and then deny the specific domain controller the "Read" and "Apply Group Policy" permission on the GP: ...
(microsoft.public.windows.server.active_directory)
Re: PPTP Site-to-Site VPN problem
... My understanding has always been that if you route between 2 or more different subnets then there has to be a gateway defined. ... If routing on a single subnet then no gateway needs to be defined. ... the RRAS service on the servers. ...
(microsoft.public.windows.server.networking)
Re: browsing nightmare .. please help
... all my clients including my servers all point to one ... move 8 servers from subnet A to subnet B. ... In my conclusion I think on subnetB the browser master is having problems ... domain master browser which resides in subnetA. ...
(microsoft.public.windows.server.dns)
Re: browsing nightmare .. please help
... all my clients including my servers all point to one ... move 8 servers from subnet A to subnet B. ... subnets except computers on the new subnetB.. ... That strongly implies that the Master Browser of SubnetB ...
(microsoft.public.windows.server.dns)
Re: Running out of IP addresses
... I have a network of 5 servers running Windows 2003 server on the same ... The subnet has 254 possible addresses,...there is no way you would run out. ... Ethernet is not supposed to have subnets bigger than 254 hosts. ...
(microsoft.public.windows.server.networking)