Solved

Automated removal of users from Local Admins Group?

Posted on 2004-04-27
4
126 Views
Last Modified: 2010-04-13
Hey folks,

I'm looking to set up something and automate it through GPO or login script.  What I want to do is remove all individual users from the local admins group on workstations through the domain and add one or two groups to the local admins.

If there was a way to make sure it only happened on 2KPro and XP machines as opposed to servers that would help too.  Any ideas?

Thanks in advance!

- Chris
0
Comment
Question by:cbarbere
4 Comments
 
LVL 41

Accepted Solution

by:
graye earned 50 total points
ID: 10935394
Rather than do this thru a GPO or login script directly... there is another way.

Take a look at the "Restricted Groups" sections of a Domain Security Policy.  It will allow you to "lock down" a group to only those folks that you want.  

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/611.asp

BTW: Like a lot of GPO-related things, users are free to add/delete members of that group, but on next reboot (or next application of the Security Policy) everything will be converted back to the way you want it.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Introduction This article is intended for those who are new to PHP error handling (https://www.experts-exchange.com/articles/11769/And-by-the-way-I-am-New-to-PHP.html).  It addresses one of the most common problems that plague beginning PHP develop…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now