policies

  • Thread starter Thread starter Tester
  • Start date Start date
T

Tester

Guest
Hello there,
I have 3 questions re. AD policies.
1. Can I set up a policy to have specific users local admins only to
their local machines[not to all machines] or this is not possible?
2. Where in W2K3 Gpedit group policies I can check for a policy that
automatically removes everyone from local admin group on local
machines, since this is the problem I am having?
3. If I set up a local XP machine policy will it get overwritten by AD
server policy at login?
Thank you, T
 
Re: policies

Hello Tester,

See inline

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hello there,
> I have 3 questions re. AD policies.
> 1. Can I set up a policy to have specific users local admins only to
> their local machines[not to all machines] or this is not possible?

You can according to this:
http://www.frickelsoft.net/blog/?p=13

But why will you do this?

> 2. Where in W2K3 Gpedit group policies I can check for a policy that
> automatically removes everyone from local admin group on local
> machines, since this is the problem I am having?

Configure restricted groups accoding to this and add only the accounts/groups
you like to have:
http://www.frickelsoft.net/blog/?p=13

> 3. If I set up a local XP machine policy will it get overwritten by AD
> server policy at login?

Yes.

> Thank you, T
 
Re: policies

Hi,
Thank you very much!
I need it for some users that need to be local admins as required by
some applications. T
 
Re: policies

Hello Tester,

With regmon and file mon from sysinternals, now MS, you can find the problem
portions of the file/registry, which needs more rights. Better use this to
correct the needed rights with startup script, then make your users local
admin. We have round 150 different apps running for our users and have no
problems with and no one is local admin.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hi,
> Thank you very much!
> I need it for some users that need to be local admins as required by
> some applications. T
 
Back
Top