Guest David Posted January 24, 2008 Posted January 24, 2008 Is it possible to use group policy to create local user accounts on workstations and then add them to the local administrators group. I have had a look in my resource kit and cannot find anything. Thanks
Guest Meinolf Weber Posted January 24, 2008 Posted January 24, 2008 Re: Group Policy and Local Accounts Hello David, Why will you create local users instead of using the domain user accounts? Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > Is it possible to use group policy to create local user accounts on > workstations and then add them to the local administrators group. I > have had a look in my resource kit and cannot find anything. Thanks >
Guest David Posted January 25, 2008 Posted January 25, 2008 Re: Group Policy and Local Accounts The reason for this is if for whatever reason we need to log onto the systems locally and a the domain is no longer available then we have the option too. It won't be used for local general users "Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message news:ff16fb668088b8ca2cfb35d0321f@msnews.microsoft.com... > Hello David, > > Why will you create local users instead of using the domain user accounts? > > Best regards > > Meinolf Weber > Disclaimer: This posting is provided "AS IS" with no warranties, and > confers no rights. > ** Please do NOT email, only reply to Newsgroups > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > >> Is it possible to use group policy to create local user accounts on >> workstations and then add them to the local administrators group. I >> have had a look in my resource kit and cannot find anything. Thanks >> > >
Guest Meinolf Weber Posted January 25, 2008 Posted January 25, 2008 Re: Group Policy and Local Accounts Hello David, If you use cached credentials the users also are able to logon without the domain. The user has to logon to the domain one time before: http://technet2.microsoft.com/windowsserver/en/library/779885d9-e5e9-4f27-9c14-5bbe77b056ba1033.mspx?mfr=true Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > The reason for this is if for whatever reason we need to log onto the > systems locally and a the domain is no longer available then we have > the option too. It won't be used for local general users > > "Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message > news:ff16fb668088b8ca2cfb35d0321f@msnews.microsoft.com... > >> Hello David, >> >> Why will you create local users instead of using the domain user >> accounts? >> >> Best regards >> >> Meinolf Weber >> Disclaimer: This posting is provided "AS IS" with no warranties, and >> confers no rights. >> ** Please do NOT email, only reply to Newsgroups >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm >>> Is it possible to use group policy to create local user accounts on >>> workstations and then add them to the local administrators group. I >>> have had a look in my resource kit and cannot find anything. Thanks >>>
Guest David Posted January 28, 2008 Posted January 28, 2008 Re: Group Policy and Local Accounts I know that but i need local admin accounts creating so that i can log on locally in some instances to reconfigure settings. "Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message news:ff16fb6680bf88ca2d97d3f0c0ff@msnews.microsoft.com... > Hello David, > > If you use cached credentials the users also are able to logon without the > domain. The user has to logon to the domain one time before: > http://technet2.microsoft.com/windowsserver/en/library/779885d9-e5e9-4f27-9c14-5bbe77b056ba1033.mspx?mfr=true > > Best regards > > Meinolf Weber > Disclaimer: This posting is provided "AS IS" with no warranties, and > confers no rights. > ** Please do NOT email, only reply to Newsgroups > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > >> The reason for this is if for whatever reason we need to log onto the >> systems locally and a the domain is no longer available then we have >> the option too. It won't be used for local general users >> >> "Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message >> news:ff16fb668088b8ca2cfb35d0321f@msnews.microsoft.com... >> >>> Hello David, >>> >>> Why will you create local users instead of using the domain user >>> accounts? >>> >>> Best regards >>> >>> Meinolf Weber >>> Disclaimer: This posting is provided "AS IS" with no warranties, and >>> confers no rights. >>> ** Please do NOT email, only reply to Newsgroups >>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm >>>> Is it possible to use group policy to create local user accounts on >>>> workstations and then add them to the local administrators group. I >>>> have had a look in my resource kit and cannot find anything. Thanks >>>> > >
Guest Meinolf Weber Posted January 28, 2008 Posted January 28, 2008 Re: Group Policy and Local Accounts Hello David, If your user account is domain admin you are automatically local administrator of the machine or you can use Restricted Groups from GPO to specify users or groups as local administrators. No need for additional local accounts. http://www.windowsecurity.com/articles/Using-Restricted-Groups.html http://www.frickelsoft.net/blog/?p=13 Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > I know that but i need local admin accounts creating so that i can log > on locally in some instances to reconfigure settings. > > "Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message > news:ff16fb6680bf88ca2d97d3f0c0ff@msnews.microsoft.com... > >> Hello David, >> >> If you use cached credentials the users also are able to logon >> without the >> >> domain. The user has to logon to the domain one time before: >> >> http://technet2.microsoft.com/windowsserver/en/library/779885d9-e5e9- >> 4f27-9c14-5bbe77b056ba1033.mspx?mfr=true >> >> Best regards >> >> Meinolf Weber >> Disclaimer: This posting is provided "AS IS" with no warranties, and >> confers no rights. >> ** Please do NOT email, only reply to Newsgroups >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm >>> The reason for this is if for whatever reason we need to log onto >>> the systems locally and a the domain is no longer available then we >>> have the option too. It won't be used for local general users >>> >>> "Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message >>> news:ff16fb668088b8ca2cfb35d0321f@msnews.microsoft.com... >>> >>>> Hello David, >>>> >>>> Why will you create local users instead of using the domain user >>>> accounts? >>>> >>>> Best regards >>>> >>>> Meinolf Weber >>>> Disclaimer: This posting is provided "AS IS" with no warranties, >>>> and >>>> confers no rights. >>>> ** Please do NOT email, only reply to Newsgroups >>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm >>>>> Is it possible to use group policy to create local user accounts >>>>> on workstations and then add them to the local administrators >>>>> group. I have had a look in my resource kit and cannot find >>>>> anything. Thanks >>>>>
Recommended Posts