[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now

x
?
Solved

How to grant access to a computer that locked it down

Posted on 2011-02-16
1
Medium Priority
?
233 Views
Last Modified: 2012-05-11
A specific user in our company that unfortuantely is a domain admin locked down his computer so that he is the only administrator of the computer and the only one that can rdp into it.  This is a windows 7 computer. Is there some way to change this behind the scenes other then managing the computer as I get access denied when trying to do that as well?
0
Comment
Question by:czaz
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 57

Accepted Solution

by:
Mike Kline earned 2000 total points
ID: 34907844
Is this machine a member of the domain or just stand alone.  If it is a domain member you can use group policies linked at the domain or OU level to override any policies he has set locally.

You can just use restricted groups and define the local admins for that box   http://www.frickelsoft.net/blog/?p=13

For a test create a test OU and move his box to it and use a GPO to add your group (or account) to the local admin on the box.

Having said that if he is a domain admin there is really nothing you can do to permanently prevent him from doing things like this because he can "undo" any change you make.

Thanks

Mike
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…
Suggested Courses

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question