RE: [ActiveDir] Customize Group Permissions

[Perdue David J Contr InDyne/Enterprise IT]

Title: Customize Group Permissions

One thing to be really careful of though.  It will replace the contents of the local group.  The only exception to this is the default local Admin account in the local Administrators group.  That account will stay.  If you are using software, like SMS, that generates it's own local admin account be sure that it is getting left in.   Dave   -------------------------------------------------------------- David J. Perdue MCSE 2000, MCSE NT, MCSA, MCP+I  Network Security Engineer, InDyne Inc  Comm: (805) 606-4597    DSN: 276-4597 [EMAIL PROTECTED] --------------------------------------------------------------    From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond Sent: Thursday, July 22, 2004 11:18 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Customize Group Permissions Yes, this is possible. Check out restricted groups in group policy.   --Brian Desmond [EMAIL PROTECTED] Payton on the Web! Http://www.wpcp.org   v: 773.534.0034 x135 f: 773.534.0035     From: Jared Manhat [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 21, 2004 3:37 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Customize Group Permissions   I though I read somewhere in the MS Server 2003 Deployment Kit under Designing a Managed Environment that it was possible to modify to local pc's group permissions using GP. Has anyone heard of this? What I'm trying to do is assign Install Printer Drivers to Power Users. Thanks Jared Manhat Systems Administrator Accutest Laboratories