Jump to content

Recommended Posts

Guest Tester
Posted

Hello there,

I have 3 questions re. AD policies.

1. Can I set up a policy to have specific users local admins only to

their local machines[not to all machines] or this is not possible?

2. Where in W2K3 Gpedit group policies I can check for a policy that

automatically removes everyone from local admin group on local

machines, since this is the problem I am having?

3. If I set up a local XP machine policy will it get overwritten by AD

server policy at login?

Thank you, T

  • Replies 3
  • Created
  • Last Reply
Guest Meinolf Weber
Posted

Re: policies

 

Hello Tester,

 

See inline

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hello there,

> I have 3 questions re. AD policies.

> 1. Can I set up a policy to have specific users local admins only to

> their local machines[not to all machines] or this is not possible?

 

You can according to this:

http://www.frickelsoft.net/blog/?p=13

 

But why will you do this?

> 2. Where in W2K3 Gpedit group policies I can check for a policy that

> automatically removes everyone from local admin group on local

> machines, since this is the problem I am having?

 

Configure restricted groups accoding to this and add only the accounts/groups

you like to have:

http://www.frickelsoft.net/blog/?p=13

> 3. If I set up a local XP machine policy will it get overwritten by AD

> server policy at login?

 

Yes.

> Thank you, T

Guest Tester
Posted

Re: policies

 

Hi,

Thank you very much!

I need it for some users that need to be local admins as required by

some applications. T

Guest Meinolf Weber
Posted

Re: policies

 

Hello Tester,

 

With regmon and file mon from sysinternals, now MS, you can find the problem

portions of the file/registry, which needs more rights. Better use this to

correct the needed rights with startup script, then make your users local

admin. We have round 150 different apps running for our users and have no

problems with and no one is local admin.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hi,

> Thank you very much!

> I need it for some users that need to be local admins as required by

> some applications. T


×
×
  • Create New...