Re: [ActiveDir] Adding users to local Admin group

Fri, 14 Oct 2005 13:20:03 -0700

Title: Adding users to local Admin group
Doesn't matter.  Computer policy is computer policy.  You can also simply link the GPO to the domain and filter it based on another security group - one that simply holds the computer accounts in question.
 
Here's an article on what you want to do:
 
 
Remember, this doesn't have to be the administrators group.  That's just the main use of this.  Any group can be used.
 
That article also discusses another way of doing this - by adding users to the group in question using NET USE (via Startup script).
 
 
--Paul
 
----- Original Message -----
Sent: Thursday, October 13, 2005 6:05 PM
Subject: RE: [ActiveDir] Adding users to local Admin group

I am concerned about the local PC’s not the Servers

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M.
Sent: Thursday, October 13, 2005 11:51 AM
To: [email protected]
Subject: RE: [ActiveDir] Adding users to local Admin group

 

One of the processes we use for servers is to create a global security group in AD that identifies accounts to be used for administering a particular computer, say “ServerName_admins”.  That group is then added to the local “ServerName\administrators” group.

 

hth,

Mike Thommes

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jake Stabl
Sent: Thursday, October 13, 2005 9:16 AM
To: [email protected]; [EMAIL PROTECTED]; [email protected]
Subject: [ActiveDir] Adding users to local Admin group

 

I am using Active Directory and I need to know how to add certain people to the local admin group only on certain computers.  I know I can do this under restricted groups but that makes thoses users local admin on all machines they log into.  Specificly I have a cisco class I need to give admin rights to but only on those computers they use.  Any one have a suggestion?

--
Jacob Stabl
Network Engineer
Plain Local School District
http://www.plainlocal.org
Office:      330.492.3500
Cell :        330.704.1278
IP Phone: 4466

Reply via email to