commsxl
asked on
ad - getting the right workstation permissions
hi all, have been wrestling with this problem for a few days now:
https://www.experts-exchange.com/questions/21043492/active-directory-finding-the-right-permissions-medium-for-end-users.html
https://www.experts-exchange.com/questions/21045893/how-to-check-to-see-if-workstation-has-domain-admin-rights.html
"confers full rights on the workstations, but not necessarily anything special on the domain"
"Normally to grant all users admin privilages on a machine you might consider creating a group, say SEC-Client Admins. Now put the domain users group into that group, and add the SEC-Client Admins group to the local admins group on each machine via GPO"
can anyone help with the above?
thanks in adavance,
chris
https://www.experts-exchange.com/questions/21043492/active-directory-finding-the-right-permissions-medium-for-end-users.html
https://www.experts-exchange.com/questions/21045893/how-to-check-to-see-if-workstation-has-domain-admin-rights.html
"confers full rights on the workstations, but not necessarily anything special on the domain"
"Normally to grant all users admin privilages on a machine you might consider creating a group, say SEC-Client Admins. Now put the domain users group into that group, and add the SEC-Client Admins group to the local admins group on each machine via GPO"
can anyone help with the above?
thanks in adavance,
chris
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Yeah sorry I see what it's done, it's put the group into the domain admins group. Still trying to find a way though, I know it can be done.
I see your point... Its not an easy job if you wish to recreate default policies...
Go to the following link:
http://www.microsoft.com/windows2000/techinfo/planning/management/groupsteps.asp
It might be helpful...
Cyber
Go to the following link:
http://www.microsoft.com/windows2000/techinfo/planning/management/groupsteps.asp
It might be helpful...
Cyber
ASKER
ASKER
youre1m:
" Don't browse, but type "Administrators" "
i've tried this, but then i can access \\domaincontroller\c$
cyber-dude:
i'm not sure where to begin with policy groups