Guest Joe Posted November 15, 2007 Posted November 15, 2007 I am looking for a tool to allow me to remove users from local Admin group remotely? Does MS offer such a tool? or is it provided in AD? Any input will be appreciated.
Guest Meinolf Weber Posted November 15, 2007 Posted November 15, 2007 Re: NT tools Hello Joe, Use restricted groups from Active directory GPO. Only members of the configured groups are local administrators, even the administrator has to be added to this group. http://www.windowsecurity.com/articles/Using-Restricted-Groups.html Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm > I am looking for a tool to allow me to remove users from local Admin > group remotely? Does MS offer such a tool? or is it provided in AD? > Any input will be appreciated. >
Guest Banks1850 Posted November 15, 2007 Posted November 15, 2007 Re: NT tools On Nov 15, 9:56 am, "Joe" <josephadel...@gmail.com> wrote: > I am looking for a tool to allow me to remove users from local Admin group > remotely? Does MS offer such a tool? or is it provided in AD? Any input > will be appreciated. from a LOCAL admin group? you should be able to remotely manage any windows machine in your domain as long as you have admin rights and the machine is a member of the domain. Log on to any machine, right click my computer and choose manage, right click computer Management (Local) and click Connect to another computer that should bring up the managment interface of the machine you want to manage, which should include the Local Users and Groups
Guest Joe Posted November 15, 2007 Posted November 15, 2007 Re: NT tools Sorry should have been more specific. After the migration of Vista, the former admin left the users in the local admin group. Most of the users really just need power users permissions. Ultimately I would like to just add domain user group that exists into the power user loca group, and remove all users but domain admins from local admin group. I was hoping either a script, or a policy could be a way to go instead of doing individual machines as there is 200+ machines, as well as being scattered. "Banks1850" <share@ebsystems.net> wrote in message news:f40b06a6-b08d-40d5-a5fd-b0d002a877aa@e1g2000hsh.googlegroups.com... > On Nov 15, 9:56 am, "Joe" <josephadel...@gmail.com> wrote: >> I am looking for a tool to allow me to remove users from local Admin >> group >> remotely? Does MS offer such a tool? or is it provided in AD? Any input >> will be appreciated. > > from a LOCAL admin group? you should be able to remotely manage any > windows > machine in your domain as long as you have admin rights and the > machine > is a member of the domain. Log on to any machine, right click my > computer and choose > manage, right click computer Management (Local) and click Connect to > another computer > > that should bring up the managment interface of the machine you want > to manage, which > should include the Local Users and Groups
Guest Robert L. \(MS-MVP\) Posted November 15, 2007 Posted November 15, 2007 Re: NT tools You may access Computer Manage remotely. This how to may help, How to access Computer Manager remotely http://www.howtonetworking.com/RemoteAccess/remotemanagement.htm -- Bob Lin, MS-MVP, MCSE & CNE Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com "Joe" <josephadeluca@gmail.com> wrote in message news:329972DE-B680-4B0C-8F9B-48B533494948@microsoft.com... >I am looking for a tool to allow me to remove users from local Admin group >remotely? Does MS offer such a tool? or is it provided in AD? Any input >will be appreciated. > >
Guest John John Posted November 16, 2007 Posted November 16, 2007 Re: NT tools AddUsers Automates Creation of a Large Number of Users http://support.microsoft.com/kb/199878 John Joe wrote: > I am looking for a tool to allow me to remove users from local Admin > group remotely? Does MS offer such a tool? or is it provided in AD? Any > input will be appreciated. > >
Guest Jack Doyle Posted December 24, 2007 Posted December 24, 2007 Re: NT tools Joe wrote: > I am looking for a tool to allow me to remove users from local Admin > group remotely? Does MS offer such a tool? or is it provided in AD? Any > input will be appreciated. Yes and yes. You may use Restricted Groups in Group Policy to accomplish this. Happy holidays. -- Jack Doyle, Systems Engineer ScriptLogic Corporation http://www.scriptlogic.com
Recommended Posts