Re: Domain Admins removed from local admin group

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Thanks to all for your asnwers...

I try before with psexec and doesn't work in my case. I'll Try with
"restricted grups. After it works I'll post if works.....

thanks again

"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb66fddf8cb2519b8276393@xxxxxxxxxxxxxxxxxxxxxxx
Hello Luis,

You can use restricted groups to fix the administrators on the local
machines. Even if the user is local admin and removes the domain admins
after the next GPO refresh they will be in again.

See here about the configuration:
http://www.frickelsoft.net/blog/?p=13

Read carefully the part with "Members of this group" and "This group is
member of"

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Hi Everybody...

In a windows 2000 domain with XP clients, each user is member of the
local
admin group (just a user for a PC). One user remove the domain admins
group
from the local admin group. I need to restore the domain admins group
as
part of the local admin group, becasuse as a domain administrator I'm
unable
to do some regular tasks with this computer .
Is it possible to make this remotely? I don't want that the user know
that I
have done this. I can just change his password and gon into its desk
and
change the settings back to the default setting, but I don't wan't to
do in
this way. Or maybe using domain policyes
thanksin advance for any answer

Luis Falch






.

Relevant Pages

  • User permission problem
    ... I have a single forest single domain Windows Server 2003 AD environment. ... have several techs that join computers to the domain, install software, etc. ... I have a GPO in place that adds a security group to the local XP admin group ... Putting them in the domain admins group eliminates the problem. ...
    (microsoft.public.windows.server.general)
  • RE: Service account
    ... domain admin group shall be a in the local administrators group ... and they shall have the local admin rights. ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.sqlserver.setup)
  • Unable to open default email folder . Exchange 2003 , Outlook 2003
    ... I had one user on Tuesday that was trying to connect to the Exchange server ... I log in as him and I then tick and untick on Work Offline so Outlook can ... If i remove them from the admin group it doesnt work. ... If this continues then i will have to make all our users Domain Admins ...
    (microsoft.public.exchange.admin)
  • Re: Security Groups question
    ... Because then you would have had to make Power Users a member of the local admin group on his laptop ... Domain admins are by default members of the local admin group on the laptop ...
    (microsoft.public.windows.server.sbs)
  • Re: Administrator
    ... Domain Admins do not neccessarily need to see or have access to in SPS/WSS. ... including patches but Sharepoint Security, which is an Application, should ... When anyone in the Domain Admin group put in time it automatically ... executive site that has confidential information in it that they can get to, ...
    (microsoft.public.sharepoint.portalserver)