Link to home
Start Free TrialLog in
Avatar of nammari
nammari

asked on

Restricted Groups - Add local account to the Restricted Group

Hi,

I am now implementing the Restricted Group Policy. I need to add Desktop Administrator group to the Restricted Group, the Desktop Administrator is a group that holds the accounts of the end user support engineers.
But, in case the DCs are down, then there is no way that we can get to the machines as Administrators, since all the Local accounts will be removed from Administrators group, and replaced by the Desktop Administrator (Domain Group). My question is, how I can add local user (local_admin) to the Local Administrator group using the Restricted Group policy?

Thanks,
ASKER CERTIFIED SOLUTION
Avatar of Alan Huseyin Kayahan
Alan Huseyin Kayahan
Flag of Sweden image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of nammari
nammari

ASKER

I didn't get it. For some reason my workstation is still not adding the new domain group that I added to the Res. Grp. in the Policy.

Also, it is not clear how I can add Local User (computer local user) to the restricted group.
Avatar of nammari

ASKER

I fix the issue, I just learned from microsoft website that the local Administrator is always listed in the Administrators group in the local machine, regardless which users listed in the "memberof" and "members" lists.

Please close the case, and refund the author the points