Re: Add Domain Admin to local XP Admin group

Yes Domain Admins are in the Local Administrator group. I need to add
either Domain Admins from a parent domain or the enterprises admin to the
child domain Local Admin group.


"Jorge Silva" <jorgesilva_pt@xxxxxxxxxxx> wrote in message
news:u1Odd$%23DIHA.1188@xxxxxxxxxxxxxxxxxxxxxxx
My point was, if you mess with RGP you can easily wipe out the DA from
local Administrators in a given workstation or in all Workstations.

The poster doesn't give much information, but something had to be done to
wipe out the DA from local Administrators group, by default it's there,
but after you mess with that you can remove them from Local Admins.


--
===================================
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
===================================

"Austin Osuide" <austin@xxxxxxxxxxx> wrote in message
news:up1AKX9DIHA.4476@xxxxxxxxxxxxxxxxxxxxxxx
;-)
We'll call it a draw then Jorge..
Unlikely GP is involved because if it was, the question would already be
answered.. GP (or by script) is how you centrally effect a change on
several boxes.
But the question is about DA in the local administrators grp and this is
not controlled by the RG policy, though that can affect it if it has been
modified by someone other than the caller. :-)

Regards,

Austin

"Jorge Silva" <jorgesilva_pt@xxxxxxxxxxx> wrote in message
news:OTLvqa4DIHA.5328@xxxxxxxxxxxxxxxxxxxxxxx
probably not because someone already messed with RGP, that's why I
mentioned, or maybe I'm wrong...

;)

--
===================================
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
===================================

"Austin Osuide" <austin@xxxxxxxxxxx> wrote in message
news:eeSQi.2228$hg.342@xxxxxxxxxxxxxxxxxxxxxxxxx
Hi Scott,
When you join a machine to the domain, the Domain Admins group are made
members of the local Administrators group of the machine by default.
Are you not seeing this when you join a machine to the domain?

Regards,

Austin
"Scott Micale" <hrm_admin@xxxxxxxxxxxxxx> wrote in message
news:un%23lvm3DIHA.5160@xxxxxxxxxxxxxxxxxxxxxxx
Is there a way to add a domain admin to the xp local admin group
through a group policy so I don't have to do it on ever PC I have?

Thanks











.

Relevant Pages

  • Re: What are the necessary rights to install SQL Server?
    ... The statement means membership in the local administrators group, ... Domain Admins). ... I support the Professional Association for SQL Server ...
    (microsoft.public.sqlserver.setup)
  • Re: Local Admin
    ... This posting is provided "AS IS" with no warranties, ... > the group that is your focus in the local Administrators group. ... > like the Domain Admins group to be a member of each and every WIN2000 and ... > you might want to include the Domain Admins group..... ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Admin & Group Policy Question
    ... >I wanted to make Domain Admins a local administrator of all machines ... >through Group Policy (I think this happens by default when a machine is ... >appears to overwrite what's already in the local administrators group. ... But since your users are local admins (how else could they remove Domain Admins?) ...
    (microsoft.public.win2000.group_policy)
  • Re: Administrator
    ... > the Local Administrators group a security risk? ... > Domain Admins available might be the only thing that saves you. ... > Sharepoint databases, right? ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Script to enumerating list of Local Admingroup member of all domai
    ... Administrator as members of machine local Administrators ... group on all machines, just define this as a Restricted Group ... domain admins and local administartor account from the computer. ...
    (microsoft.public.windows.server.scripting)