Re: Add Domain Admin to local XP Admin group

Scott,
Not sure now whats going on.
EAs are already Admins of all domains in the forest.
Domain Administration is Domain scoped. Why do you want to extend it?

Regards,
Austin

"Scott Micale" <hrm_admin@xxxxxxxxxxxxxx> wrote in message
news:Oo8ElzBEIHA.2268@xxxxxxxxxxxxxxxxxxxxxxx
Yes Domain Admins are in the Local Administrator group. I need to add
either Domain Admins from a parent domain or the enterprises admin to the
child domain Local Admin group.


"Jorge Silva" <jorgesilva_pt@xxxxxxxxxxx> wrote in message
news:u1Odd$%23DIHA.1188@xxxxxxxxxxxxxxxxxxxxxxx
My point was, if you mess with RGP you can easily wipe out the DA from
local Administrators in a given workstation or in all Workstations.

The poster doesn't give much information, but something had to be done to
wipe out the DA from local Administrators group, by default it's there,
but after you mess with that you can remove them from Local Admins.


--
===================================
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
===================================

"Austin Osuide" <austin@xxxxxxxxxxx> wrote in message
news:up1AKX9DIHA.4476@xxxxxxxxxxxxxxxxxxxxxxx
;-)
We'll call it a draw then Jorge..
Unlikely GP is involved because if it was, the question would already be
answered.. GP (or by script) is how you centrally effect a change on
several boxes.
But the question is about DA in the local administrators grp and this is
not controlled by the RG policy, though that can affect it if it has
been modified by someone other than the caller. :-)

Regards,

Austin

"Jorge Silva" <jorgesilva_pt@xxxxxxxxxxx> wrote in message
news:OTLvqa4DIHA.5328@xxxxxxxxxxxxxxxxxxxxxxx
probably not because someone already messed with RGP, that's why I
mentioned, or maybe I'm wrong...

;)

--
===================================
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
===================================

"Austin Osuide" <austin@xxxxxxxxxxx> wrote in message
news:eeSQi.2228$hg.342@xxxxxxxxxxxxxxxxxxxxxxxxx
Hi Scott,
When you join a machine to the domain, the Domain Admins group are
made members of the local Administrators group of the machine by
default. Are you not seeing this when you join a machine to the
domain?

Regards,

Austin
"Scott Micale" <hrm_admin@xxxxxxxxxxxxxx> wrote in message
news:un%23lvm3DIHA.5160@xxxxxxxxxxxxxxxxxxxxxxx
Is there a way to add a domain admin to the xp local admin group
through a group policy so I don't have to do it on ever PC I have?

Thanks














.

Relevant Pages

  • file permission strangeness
    ... The local Administrators group has the following members: ... xdom\domain admins, xdom\admin, ydom\domain admins. ... d:\ (root folder) owner is Administrators, ...
    (microsoft.public.win2000.security)
  • Re: administrator on box also on domain?
    ... > administrators group at the PC then it shows something like: ... > domain_name\Domain Admins ... so we add the user to the local Administrators ...
    (microsoft.public.windows.server.active_directory)
  • RE: Automating Local Computer Admin Rights
    ... groups the first box that pops up add administrators. ... add domain admins because they are there by deafult and add adminstrators. ... gpo settings will not tricly down or inherit the settings just from a child ... members of the administrators group on the local machine. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Administrator privs on Client
    ... It is fairly normal to restrict admin access to SQL Server to only ... Domain Admins is added to a machine's Administrators ... I have an SQL server on my domain, I have to login as the local sql ...
    (microsoft.public.windows.group_policy)
  • Re: Weird security problem in my WIn2K domain
    ... Keep in mind that enterprise admins group has no administrative powers on ... Another thing to try is to create a new account ... add that account to the local administrators ... enable auditing of account logon events in Domain Controller Security Policy ...
    (microsoft.public.windows.server.security)