Re: add group back.

From: Eric Chamberlain (eric.chamberlain_at_newsgroups.nospam)
Date: 05/05/04 

Date: Tue, 4 May 2004 19:44:54 -0700

Roger is correct, I was assuming that the op was stuck because there were no
other accounts that were members of the Administrators group. The better
way to create the GPO, is to create a Restricted group for Domain Admins and
then add Administrators to member of.

"Roger Abell [MVP]" <mvpNoSpam@asu.edu> wrote in message
news:uv2sIZgMEHA.1312@TK2MSFTNGP12.phx.gbl...
> Oh my, con caro . . .
>
> When you define a restricted group you are stating the exact
> membership of the group. So, in addition to Domain Admins
> you also need to specify any other local accounts on that
> machine that need to be members of Administrators.
>
> --
> Roger Abell
> Microsoft MVP (Windows Server System: Security)
> MCDBA, MCSE W2k3+W2k+Nt4
> "js" <js@someone@hotmail.com> wrote in message
> news:%23Rc42fdMEHA.1468@TK2MSFTNGP12.phx.gbl...
> > Thanks Eric!
> >
> > "Eric Chamberlain" <eric.chamberlain@newsgroups.nospam> wrote in message
> > news:uhkkebXMEHA.3016@tk2msftngp13.phx.gbl...
> >> Go to the OU that the machine is a member of and create a new GPO.
> >> In the new GPO, under computer, security settings, choose Restricted
> > groups.
> >> Create a new entry for administrators and make Domain Admins a member.
> >>
> >
> >
>
>

Relevant Pages

  • Re: Security Template question
    ... all of which are members of the administrators group. ... and letting them know that this is the account for day-to-day use. ... Roger Abell ...
    (microsoft.public.win2000.security)
  • Re: add group back.
    ... Roger is correct, I was assuming that the op was stuck because there were no ... other accounts that were members of the Administrators group. ...
    (microsoft.public.windows.server.security)
  • Re: I need a permission GURU!
    ... Administrators and Users are two separate groups and "deny" to users ... > permissions on a file or folder in either OS to lock out members of ... > Its as if all accounts fall under the "users" group. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Security Template question
    ... all of which are members of the administrators group. ... > account, which is to be used only when its powers are being used. ... > Roger Abell ...
    (microsoft.public.win2000.security)
  • Re: Administrator Group Accounts
    ... >> I have several user accounts that are Members of the Administrators ... account that is generated during installation of XPpro had something ...
    (microsoft.public.windowsxp.basics)