Re: OU Administrator setup/Admin Shares

It worked perfectly with my Windows XP PCs, but does not seem to work with my
Windows 2000 Pro PCs. Is there anything different I need to do with the
Windows 2000 PCs?

"Paul Bergson [MVP-DS]" wrote:

You could use the restricted user group gpo setting to make the users admins
on these machines. The $ shares are shared out to local administrators of
the machines.

computer configuration \ windows settings \ restricted groups

group = your group to be made local admins
member of = BUILTIN\Administrators

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/156780ef-eb36-4433-b3fe-1b1a15c18f6a.mspx

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_scerestrictgroups.mspx


There is absolutely nothing that has to be done on the client side.

Create the gpo in the ou where the Computers reside (NOT the users), go to
computer configuration/windows settings/security settings/restricted groups,
right click on restricted groups and select new group (For the local
computers, this group name should be - administrators) and key in the group
you want auto populated. Select add on the Members of this group and then
add the members you want populated.


--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Eagle" <Eagle@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:79122BEC-1B75-438D-A085-BE5D61186B72@xxxxxxxxxxxxxxxx
I need to be able to setup an OU Administrators Group that also has the
ability to access all of the administrative shares for just the computers
located in the OU. I will then add all users that I need them to be able
to
install new software and also access c$

I cannot allow the OU Administrators to access any other administrative
functions in the rest of the Domain.

The Administrative share I need them to access is c$






.

Relevant Pages

  • Re: Vista exceeds Apples installed base in first five weeks of shipment!
    ... will be more PCs running Windows in the world than there are ... computers and that will bump the numbers around *a little*. ... PCs (because some of the billion internet users access via mobile ...
    (comp.sys.mac.advocacy)
  • RE: Internet Connection Sharing and 2 PCs
    ... - Windows Firewall ot Norton Internet ... Security 2006 which is what I am running on both PCs. ... How would I go about configuring the firewall for ICS? ... 131.107.2.xxx for both computers. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Just venting (totally OT) (caution - rant)
    ... When personal computers first became affordable, ... the computer came on its own with an operating system built ... all the early PCs that I know about had operating systems built ... slightly more than Windows. ...
    (uk.people.support.depression)
  • Re: OU Administrator setup/Admin Shares
    ... My mistake on the Windows 2000 PC, it was not a member of my test OU. ... The $ shares are shared out to local administrators ... Create the gpo in the ou where the Computers reside, ...
    (microsoft.public.windows.server.active_directory)
  • RE: Fax Preview Button
    ... "Preview Fax" button is available to users without local administrators ... permission on their computers. ... If this issue occurs on the Windows XP Home Edition SP1-based or the ... Update for Microsoft Windows XP: ...
    (microsoft.public.windows.server.sbs)
Loading