Registered users    
MembershipMembership:
Latest New UserLatest:Randy Walker
New TodayNew Today:1
New YesterdayNew Yesterday:5
User CountOverall:23338
Private messaging    
You must be logged in to use this module.
Top 10 posters    
NamePosts
Mariette Knap12903
Marina Roos12523
Eriq Neale2114
Stan Guinn1914
Michael Patrick1913
Robert Pearman1771
Nick Pieters1425
Stewart Brown617
william warren603
Kevin D.579
Welcome unauthorized visitor    
If you want to join us in the discussions on this forum you need to register first. Registration is free! If you are already a registered user please login to join the forum.
Small Business Server Support Forum    
Forums > Microsoft Small Business Server 2003 & 2000 > Workstations
Subject: How to use GPO to add Domain Users to Local Admin group???
Prev Next
You are not authorized to post a reply.

Author Messages
Alexandre Michel User is Offline
Sunny Sydney, Australia (GMT+10)
Member since
4/18/2005

Platinum Membership
Posts: 283
8/13/2008 05:04 PM  
Hi all,
 
In two days I am going to migrate a series of XP PCs to a SBS domain.
 
One concern: These PCs have been locked down using a series of local policies which I have not setup myself (done by previous IT consultant).
   I can't start the "Run..." command,
   I can't start the Command Prompt,
   I might even have troubles starting the Internet Explorer!
 
Some of these PCs will be used by different people
Amongst other things, I need to add the Domain Users to the Local Administrators Group.
How can I do that using Group Policies?
 
Thanks for your help
Alexandre Michel
http://www.azteq.com.au
Sydney, Australia
Phil Bennett User is Offline
United Kingdom
Member since
10/2/2006

Registered Users
Posts: 121
8/14/2008 10:58 AM  
Alexandre,

I did this in a test environment a few years ago.

I created a new Security Group in AD. Called Local Admin - made the Domain Users (or whatever user/group you require) a member of this new Local Admin group.

Create a new GPO and in the Computer Configuration go to Windows Settings > Restricted Groups. Add the new Local Admin group then make this a member of Administrators.
Apply the GPO to the domain or the correct OU. Reboot the one of the computers and it will add the Domain Local Admin group to the Local Administrators group on that PC.

Just thinking though, you might not be able to join the computer to the domain if it the has been restricted properly. You will probably need to use the local admin account first.

Phil
Alexandre Michel User is Offline
Sunny Sydney, Australia (GMT+10)
Member since
4/18/2005

Platinum Membership
Posts: 283
8/14/2008 12:47 PM  
Hi Phil,

Thank you very much for taking the time to explain this to me. GPOs are not my forte!

Will try now in my lab, so I am ready for tomorrow...

Cheers
Alexandre Michel
http://www.azteq.com.au
Sydney, Australia
You are not authorized to post a reply.
Forums > Microsoft Small Business Server 2003 & 2000 > Workstations > How to use GPO to add Domain Users to Local Admin group???



ActiveForums 3.7
Forum policy    
These Discussion Forums are dedicated to the discussion of the Small Business Server and related server and client software. For the benefit of the community please observe the following posting guidelines:
  1. No Advertising. This includes promotion of commercial products and non-commercial products which are not directly related to Small Business Server and related server and client software.
  2. No Flaming or Trolling.
  3. No Profanity, Racism, or Prejudice.
  4. Site Moderators have the final word on approving/removing a thread or post or comment.
Copyright 2002-2008 Concentrix b.v.    :   Page generated in 0.312502 seconds.   :   Terms Of Use   :   Privacy Statement