RE: [ActiveDir] Customize Group Permissions

[joe]

Title: Customize Group Permissions

Re: the built in admin account not being removed... It does this because you aren't supposed to be able to remove that user from that group, not anything the GPO is trying to do. I have seen occasions where the system is trying to apply this (i.e. remove the administrator from admins group) and the system eventually pukes out with Out of Resources.     joe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Perdue David J Contr InDyne/Enterprise IT Sent: Thursday, July 22, 2004 3:56 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Customize Group Permissions One thing to be really careful of though.  It will replace the contents of the local group.  The only exception to this is the default local Admin account in the local Administrators group.  That account will stay.  If you are using software, like SMS, that generates it's own local admin account be sure that it is getting left in.   Dave   -------------------------------------------------------------- David J. Perdue MCSE 2000, MCSE NT, MCSA, MCP+I  Network Security Engineer, InDyne Inc  Comm: (805) 606-4597    DSN: 276-4597 [EMAIL PROTECTED] --------------------------------------------------------------    From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond Sent: Thursday, July 22, 2004 11:18 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Customize Group Permissions Yes, this is possible. Check out restricted groups in group policy.   --Brian Desmond [EMAIL PROTECTED] Payton on the Web! Http://www.wpcp.org   v: 773.534.0034 x135 f: 773.534.0035     From: Jared Manhat [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 21, 2004 3:37 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Customize Group Permissions   I though I read somewhere in the MS Server 2003 Deployment Kit under Designing a Managed Environment that it was possible to modify to local pc's group permissions using GP. Has anyone heard of this? What I'm trying to do is assign Install Printer Drivers to Power Users. Thanks Jared Manhat Systems Administrator Accutest Laboratories