Solved

How to grant access to a computer that locked it down

Posted on 2011-02-16
1
229 Views
Last Modified: 2012-05-11
A specific user in our company that unfortuantely is a domain admin locked down his computer so that he is the only administrator of the computer and the only one that can rdp into it.  This is a windows 7 computer. Is there some way to change this behind the scenes other then managing the computer as I get access denied when trying to do that as well?
0
Comment
Question by:czaz
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 34907844
Is this machine a member of the domain or just stand alone.  If it is a domain member you can use group policies linked at the domain or OU level to override any policies he has set locally.

You can just use restricted groups and define the local admins for that box   http://www.frickelsoft.net/blog/?p=13

For a test create a test OU and move his box to it and use a GPO to add your group (or account) to the local admin on the box.

Having said that if he is a domain admin there is really nothing you can do to permanently prevent him from doing things like this because he can "undo" any change you make.

Thanks

Mike
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Outlook 2016 processing loop 4 44
Testrail - Active Directory integration. 4 34
Updating Printer Details in VB.Net 16 38
Network Policy to lock out from idle session 7 25
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question