Re: add group back.

From: Eric Chamberlain (eric.chamberlain_at_newsgroups.nospam)
Date: 05/04/04 

Date: Mon, 3 May 2004 18:26:49 -0700

Go to the OU that the machine is a member of and create a new GPO.
In the new GPO, under computer, security settings, choose Restricted groups.
Create a new entry for administrators and make Domain Admins a member.

"js" <js@someone@hotmail.com> wrote in message
news:%23nQieDRMEHA.3668@TK2MSFTNGP11.phx.gbl...
> How to do that? Pls advice...
>
> "Eric Chamberlain" <eric.chamberlain@newsgroups.nospam> wrote in message
> news:%23PLSmRNMEHA.2244@tk2msftngp13.phx.gbl...
> > If you don't have another account with Administrator rights on the
> machine,
> > you can create a group policy to add Domain Admins to the Administrators
> > group.
> >
> > "js" <js@someone.com> wrote in message
> > news:eAIy29%23LEHA.2012@TK2MSFTNGP11.phx.gbl...
> > > Hi,
> > >
> > > I¡¯ve accidentally remove the Domain Admins group from a local
> administer
> > > group in one of my server. And the current logging user is only a
member
> > of
> > > Domain Admin. Can I add the Domain Admins back to the local admin
group?
> > >
> > > Please help. Thanks...
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: AD Design
    ... Within a new domain the domain admins can administer the complete domain, ... If you add them to the Enterprise admins, they are able to administer the complete forest. ... By default, this group is a member of the Administrators group on all domain controllers, all domain workstations, and all domain member servers at the time they are joined to the domain. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Opening workstation event view = Access Denied
    ... You can add domain groups (or user accounts) to local groups using Restricted Groups in a GPO. ... In a domain of any size, you might NOT want the people that administer workstations to be Domain Admins. ... You can then designate which user accounts are workstation administrators without also granting them administrative rights to the whole domain. ... being a member of the Domain Admins group does NOT necesarily mean you are an administrator on the domain member computer. ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to make give cross-domain "Domain Admins" permissions
    ... that "Domain Admins" do. ... Domain Admins don't have any special permissions, ... member of administrators on every domain member and the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Add user/group to local group via Group Policy
    ... In a GPO that has all machines which should be affected in its scope, ... Change the Member Of list so that it names the built-in Administrators ... This will guarantee that Domain Admins is a member of Administrators ...
    (microsoft.public.windows.group_policy)
  • Re: Opening workstation event view = Access Denied
    ... Domain Admins gets added to the local group called Administrators. ... being a member of the Domain Admins group does NOT necesarily mean you ... Remote Desktop Users pmd.local/Builtin ...
    (microsoft.public.windows.server.active_directory)