Link to home
Start Free TrialLog in
Avatar of commsxl
commsxl

asked on

ad - getting the right workstation permissions

hi all, have been wrestling with this problem for a few days now:

https://www.experts-exchange.com/questions/21043492/active-directory-finding-the-right-permissions-medium-for-end-users.html
https://www.experts-exchange.com/questions/21045893/how-to-check-to-see-if-workstation-has-domain-admin-rights.html

"confers full rights on the workstations, but not necessarily anything special on the domain"

"Normally to grant all users admin privilages on a machine you might consider creating a group, say SEC-Client Admins. Now put the domain users group into that group, and add the SEC-Client Admins group to the local admins group on each machine via GPO"

can anyone help with the above?

thanks in adavance,

chris
ASKER CERTIFIED SOLUTION
Avatar of youre1m
youre1m

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of commsxl
commsxl

ASKER

hi guys, thanks for the response.

youre1m:

" Don't browse, but type "Administrators" "

i've tried this, but then i can access \\domaincontroller\c$

cyber-dude:

i'm not sure where to begin with policy groups
Yeah sorry I see what it's done, it's put the group into the domain admins group. Still trying to find a way though, I know it can be done.
I see your point... Its not an easy job if you wish to recreate default policies...

Go to the following link:

http://www.microsoft.com/windows2000/techinfo/planning/management/groupsteps.asp

It might be helpful...

Cyber