Solved

Creating a  restricted group  - group policy to remove users from local admin group and add to power users group

Posted on 2008-09-29
2
447 Views
Last Modified: 2012-08-13
Hello Everyone,

Most of my users who have xp and vista machines are local admins.  I want to implement a restricted group policy to remove them  from the local admin group and then add him/her to the local power users group.  
Does anyone have any documentation on how to do this?  Also,  Can I do this on a specific OU or group?

Thanks,

Bill
0
Comment
Question by:bjennings
2 Comments
 
LVL 5

Accepted Solution

by:
NutrientMS earned 500 total points
ID: 22599895
Hi Bill,

i'm not 100% sure how to use group policy to remove users from the local admins group, however to to the Power Users group in Group Policy you go to:

Computer Settings -> Windows Settings -> Security Settings -> Restricted Groups

From here you can set the Power Users group to have the YourDomain\Domain Users group as a member.  We use this to add all of our Domain Users to the Local Administrators group.

As this is a Computer Settings Policy, it needs to be applied to the OU that stores your computers and will apply to all the computers in the group.  If you only want to run it on some computers, you will need to split these out into their own OU and apply the policy to that one only.

Cheers.
0
 

Author Closing Comment

by:bjennings
ID: 31501300
Thanks..Worked Great!!  
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now