NFCC
asked on
Users added to local administrators group through group policy
Is there a way to add users to the Local administrators group on the machine using group policy / restricted groups that will compliment (add to) the already existing users and not replace everything with what I have created in the restricted groups? Every time I implement this I loose users who have been added to the local administrators group manually. I want to keep these users and use GPO.
In order to get the end result you desire, you will need to add the manually added users to the GPO setting that defines members of the local administrators group. The reason for this is that when a GPO is applied to a system, it overrides the local security policy.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
LauraEHunterMVP:
This is an excellent tip. I had not thought to use Restricted Groups in this way.
This is an excellent tip. I had not thought to use Restricted Groups in this way.
I want to do the samething here! However, I dont want the users to have administrator rights to their PC. I want users to have lets say "Power User" rights BUT I want to have admin rights to their PC.
I dont want to have to go to each PC and manually put my name in as a admin and take them out and put them into another group.
I dont want to have to go to each PC and manually put my name in as a admin and take them out and put them into another group.