windows 2003 GPO

Posted on 2006-05-10
Last Modified: 2010-03-18
Hi ,
I have created an OU that includes former domain admins. I want to give them local admin rights to all 100 member servers but no access to the domain controllers. The are out of the domain Admins group.
Can members of the built in group 'Domain computers' and server operators join a workstation in the domain ?
How should i build my Gropu policy to reach the above result ?

Question by:c_hockland
    1 Comment
    LVL 4

    Accepted Solution

    who has permission to add a computer to the domain depends on this GPO setting:
    default domaincontrollers policy - computer settings - windows settings - security settings - local policy -
    user rights assignment - Add Workstations to domain.

    next , you can group your servers in an OU and apply a policy to the OU which uses Restricted Groups to add a Domain group to the local admins group on these servers.
    Of course you have to create a group with your former DA's.
    Info on Restricted Groups:

    hope this helps!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to improve team productivity

    Quip adds documents, spreadsheets, and tasklists to your Slack experience
    - Elevate ideas to Quip docs
    - Share Quip docs in Slack
    - Get notified of changes to your docs
    - Available on iOS/Android/Desktop/Web
    - Online/Offline

    A brief overview to explain gateways, default gateways and static routes OR NO - you CANNOT have two default gateways on the same server, PC or other Windows-based network device. In simple terms a gateway is formed when a computer such as a serv…
    Enterprise networks where VoIP phones have been deployed frequently use port configurations that allow both a computer and an IP phone to be plugged into the same switch port but use different VLANs. On Cisco equipment I'm referring to the "native V…
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now