).
--Paul
- Original Message -
From:
Salandra,
Justin A.
To: ActiveDir@mail.activedir.org
Sent: Thursday, October 13, 2005 6:05
PM
Subject: RE: [ActiveDir] Adding users to
local Admin group
I
am concerned about the local PCs not the Servers
Hi Jake,
You could use security groups to filter who the GPO can apply to.
Create a Security Group called restricted admins, and place the computers you
need the special rights on. Then only give that security groups rights to
process the GPO.
Hope that helps,
Tim
Title: Adding users to local Admin group
The restricted groups setting falls under the Computer
Config section of the GPO, so it's not going to apply to all machines they log
into. It's only going to apply to the computers that receive the
GPO.
Put the computers that are going to be used in
Title: Adding users to local Admin group
One
of the processes we use for servers is to create a global security group in AD
that identifies accounts to be used for administering a particular computer,
say ServerName_admins. That group is then added to the
local ServerName\administrators
: RE: [ActiveDir] Adding
users to local Admin group
One of the processes we
use for servers is to create a global security group in AD that identifies
accounts to be used for administering a particular computer, say
ServerName_admins. That group is then added to the local
ServerName\administrators
