policy question

[Guest Tester]

Hello there,

How can I check if there is a policy that removes the local admin

privileges of the AD user that logs on to the AD domain? Some users

might need local admin privileges for some applications to work

properly.

Also, can I enable some local computer policy on the user XP machine

to override the above?

I have an AD domain with multiple sites and OUs.

Thanks, T

[Guest Florian Frommherz [MVP]]

Re: policy question

 

Howdie!

 

Tester schrieb:

> How can I check if there is a policy that removes the local admin

> privileges of the AD user that logs on to the AD domain? Some users

> might need local admin privileges for some applications to work

> properly.

> Also, can I enable some local computer policy on the user XP machine

> to override the above?

> I have an AD domain with multiple sites and OUs.

 

The checking you can only perform with rsop.msc.

You can, however asure that particular users are members of the local

administrator's group by using the new Group Policy Preferences or

"legacy" Group Policy with the Restricted Groups feature. It basically

adds or replaces members of a machine's "Administrator" group (or every

other group):

 

http://www.frickelsoft.net/blog/?p=24

 

cheers,

 

Florian

--

Microsoft MVP - Windows Server - Group Policy.

eMail: prename [at] frickelsoft [dot] net.

blog: http://www.frickelsoft.net/blog.

Use a newsreader! http://www.frickelsoft.net/news.html