Petri.co.il forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Server Operating Systems > Windows Server 2000 / 2003 / 2003 R2
Petri.co.il is happy to award RicklesP the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read
Notices

Adding Domain user accounts by default to the Administrators group of domain computer

Adding Domain user accounts by default to the Administrators group of domain computer

this thread has 2 replies and has been viewed 15344 times

Closed Thread
 
Thread Tools Search this Thread Display Modes
  #1  
Old 23rd August 2006, 14:24
smjailani smjailani is offline
Casual
Casual
 
 Join Date: Aug 2006
  6 month star 12 month star
 Posts: 3
 Reputation: smjailani is on a distinguished road (10)
Default Adding Domain user accounts by default to the Administrators group of domain computer

Hi there,

We have 2000 users in our Active Directory in single domain splitted with 40 Sites. Some of the Helpdesk users want to connect the domain PCs to do some administrative functions on the PCs, At the same time i have added these users in "HDESK" DL-G group and this "HDESK" DL-G group is member of Account operators group. they have access in the domain controllers for creating, deleting user IDs and to reset their passwords.

Now i want to add this "HDESK" DL-G group in all the local PCs administrator group. so that they have administrativr right on the local PCs. is is possible to automate by GPO or script.so that i don't want to connect each pc and this group manually ??

By default "Domain Admins" group is added to the administrators group in the PC if it is connected to the domain. but i don't want help desk users to give domain admin rights because of security reasons.


Advanced Thanks
  #2  
Old 23rd August 2006, 14:31
Dumber's Avatar
Dumber Dumber is offline
Moderator
 
 Join Date: Dec 2003
  6 month star 12 month star
 Location: The Netherlands
 Posts: 8,172
 Reputation: Dumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to behold (844)
Default Re: Adding Domain user accounts by default to the Administrators group of domain computer

I thought you can do this with restricted groups in a GPO

http://www.windowsecurity.com/articl...ed-Groups.html
http://www.windowsecurity.com/articl...ed-Groups.html
__________________
Marcel
Technical Consultant
Netherlands
http://www.phetios.com
http://blog.nessus.nl

MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
"No matter how secure, there is always the human factor."

"Enjoy life today, tomorrow may never come."
"If you're going through hell, keep going. ~Winston Churchill"

  #3  
Old 26th August 2006, 07:56
smjailani smjailani is offline
Casual
Casual
 
 Join Date: Aug 2006
  6 month star 12 month star
 Posts: 3
 Reputation: smjailani is on a distinguished road (10)
Thumbs up Re: Adding Domain user accounts by default to the Administrators group of domain computer

Thanks a lot Dumber for your valuable solution, Thanks for the link. This is what i need to do in my domain PCs. It really helps me in solving the difficulty i had.
Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
GPO not being applied to WinXP workstation. JDMils GPO 5 2nd November 2007 15:41
User login problem ! sco1984 Windows 2000 Pro, XP Pro 5 5th September 2006 16:14
errors appear after a fresh install of exch 2003 kopal Exchange 2000 / 2003 3 22nd June 2006 14:31
group strategy SpyD Active Directory 13 23rd May 2005 23:16
PHP extensions installations , IIS crash after enable mbstri igoldman Windows Server 2000 / 2003 / 2003 R2 0 7th April 2005 10:42


All times are GMT +3. The time now is 11:30.

Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
 

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri