Re: Site Policies and Domain Controllers
- From: "Florian Frommherz [MVP]" <florian@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Wed, 26 Sep 2007 07:27:31 +0200
Howdie!
JayDee schrieb:
We would like to create a site policy that adds a domain global group
to the local administrators group of all servers on a specific subnet,
since we will have a local group supporting them... however, there is
a domain controller on one of the subnets. Is there any way to set up
our "restricted groups" policy on all servers without giving those
admins administrator access to the entire domain??
You could try to create the Group Policy linked to the site and then deny the specific domain controller the "Read" and "Apply Group Policy" permission on the GP:
http://www.frickelsoft.net/blog/?p=28
cheers,
Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
.
- References:
- Site Policies and Domain Controllers
- From: JayDee
- Site Policies and Domain Controllers
- Prev by Date: Re: Types of ICMP Used by DC?
- Next by Date: Re: Group Policy Reporting
- Previous by thread: Site Policies and Domain Controllers
- Next by thread: Re: Group Policy Reporting
- Index(es):
Relevant Pages
|
