Title: Message
Open
up the GPO properties and in the security tab add the Helpdesk group. Give
them read and apply group policy for that
policy. remove apply group policy from any other group
you do not want to get the policy, I.E. Authenticated
Users.
Regards,
David
Chianese
The easiest way Ive found to
do it is have a GPO that runs a batch file on startup.
net localgroup Administrators /ADD
helpdesk
Weve also written some _vbscript_s
that adds a local account and makes it a member of the administrators
group. We feed the password as a parameter from the
Be very wary of this one, I removed Domain Admin from the local admin group on
every computer (including servers) in my domain, fortunately I had changed the
local admin password on all my servers before I did this and I only lost one PC
that didn't have our default PC admin password. I highly
: [ActiveDir] Adding Helpdesk
Group to Local Admin Group
Open
up the GPO properties and in the security tab add the Helpdesk group. Give
them read and apply group policy for that
policy. remove apply group policy from any other group
you do not want to get the policy, I.E. Authenticated
Users
@mail.activedir.org
Subject: Re: [ActiveDir] Adding Helpdesk Group to Local Admin Group
Be very wary of this one, I removed Domain Admin from the local admin group
on every computer (including servers) in my domain, fortunately I had changed
the local admin password on all my servers before I did this and I only
? -anon
From: [EMAIL PROTECTED] on behalf of CHIANESE, DAVID
Sent: Thu 10/13/2005 8:48 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Adding Helpdesk Group to Local Admin Group
Open up the GPO properties and in the security tab add the Helpdesk group
] On Behalf Of CHIANESE, DAVID
Sent: Thursday, October 13, 2005
11:49 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Adding
Helpdesk Group to Local Admin Group
Open up the GPO
properties and in the security tab add the Helpdesk group. Give them read and
apply group policy
for that policy
This has been discussed a few times on the list. You want
to use the memberof feature of group policy. I think it was about 18-24 months
ago that there was a rather long drawn out discussion of this new capability.
joe
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
