Guest Tester Posted June 19, 2008 Posted June 19, 2008 Hello there, I have 3 questions re. AD policies. 1. Can I set up a policy to have specific users local admins only to their local machines[not to all machines] or this is not possible? 2. Where in W2K3 Gpedit group policies I can check for a policy that automatically removes everyone from local admin group on local machines, since this is the problem I am having? 3. If I set up a local XP machine policy will it get overwritten by AD server policy at login? Thank you, T
Guest Meinolf Weber Posted June 19, 2008 Posted June 19, 2008 Re: policies Hello Tester, See inline Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > Hello there, > I have 3 questions re. AD policies. > 1. Can I set up a policy to have specific users local admins only to > their local machines[not to all machines] or this is not possible? You can according to this: http://www.frickelsoft.net/blog/?p=13 But why will you do this? > 2. Where in W2K3 Gpedit group policies I can check for a policy that > automatically removes everyone from local admin group on local > machines, since this is the problem I am having? Configure restricted groups accoding to this and add only the accounts/groups you like to have: http://www.frickelsoft.net/blog/?p=13 > 3. If I set up a local XP machine policy will it get overwritten by AD > server policy at login? Yes. > Thank you, T
Guest Tester Posted June 20, 2008 Posted June 20, 2008 Re: policies Hi, Thank you very much! I need it for some users that need to be local admins as required by some applications. T
Guest Meinolf Weber Posted June 20, 2008 Posted June 20, 2008 Re: policies Hello Tester, With regmon and file mon from sysinternals, now MS, you can find the problem portions of the file/registry, which needs more rights. Better use this to correct the needed rights with startup script, then make your users local admin. We have round 150 different apps running for our users and have no problems with and no one is local admin. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > Hi, > Thank you very much! > I need it for some users that need to be local admins as required by > some applications. T
Recommended Posts