Re: Add Domain Admin to local XP Admin group

My point was, if you mess with RGP you can easily wipe out the DA from local
Administrators in a given workstation or in all Workstations.

The poster doesn't give much information, but something had to be done to
wipe out the DA from local Administrators group, by default it's there, but
after you mess with that you can remove them from Local Admins.


--
===================================
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
===================================

"Austin Osuide" <austin@xxxxxxxxxxx> wrote in message
news:up1AKX9DIHA.4476@xxxxxxxxxxxxxxxxxxxxxxx
;-)
We'll call it a draw then Jorge..
Unlikely GP is involved because if it was, the question would already be
answered.. GP (or by script) is how you centrally effect a change on
several boxes.
But the question is about DA in the local administrators grp and this is
not controlled by the RG policy, though that can affect it if it has been
modified by someone other than the caller. :-)

Regards,

Austin

"Jorge Silva" <jorgesilva_pt@xxxxxxxxxxx> wrote in message
news:OTLvqa4DIHA.5328@xxxxxxxxxxxxxxxxxxxxxxx
probably not because someone already messed with RGP, that's why I
mentioned, or maybe I'm wrong...

;)

--
===================================
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
===================================

"Austin Osuide" <austin@xxxxxxxxxxx> wrote in message
news:eeSQi.2228$hg.342@xxxxxxxxxxxxxxxxxxxxxxxxx
Hi Scott,
When you join a machine to the domain, the Domain Admins group are made
members of the local Administrators group of the machine by default. Are
you not seeing this when you join a machine to the domain?

Regards,

Austin
"Scott Micale" <hrm_admin@xxxxxxxxxxxxxx> wrote in message
news:un%23lvm3DIHA.5160@xxxxxxxxxxxxxxxxxxxxxxx
Is there a way to add a domain admin to the xp local admin group
through a group policy so I don't have to do it on ever PC I have?

Thanks









.

Relevant Pages

  • Re: Managing employee access to client networks
    ... added to the workstation local administrators group. ... to our system and to our clients systems. ...
    (microsoft.public.windows.server.sbs)
  • Local Group Policy Filtering: Not Applied (Empty)
    ... I have a test OU with one workstation in it. ... global group to the local Administrators group on the workstations in the OU. ... This was done with a GPO using Computer Configuration\Windows ...
    (microsoft.public.windows.server.active_directory)
  • Re: SBS 2003 Premium Setup of end users.
    ... local machine Administrators. ... particular workstation remove them from the local Admin group on that ... After the initial setup, those permissions are not needed and the ... computer which is the current Workstation1 unit. ...
    (microsoft.public.windows.server.sbs)
  • Re: Must all users be administrators?
    ... What I am upset about is the extensive use of the administrators ... group on the local workstation. ... > permissions to control, just read permissions. ... If it's a folder, you can ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 Premium Setup of end users.
    ... In the Local Users & Groups | Groups | Administrators ... I saw an entry for domain users and I deleted it. ... SBS needs a user to have local admin permissions on the workstation to ... That hard drive currently resides on the Workstation1 unit as a spare ...
    (microsoft.public.windows.server.sbs)