garconer
asked on
Local admin account was renamed using GPO. How Should I configure restricted groups
Hi Experts,
Local Admin account was renamed at Default Domain Policy to ADM1. Need to enforce Local Administrators group to have a specific users and groups in it.
How Sould I input local admin account in restricted group gpo? Should I just type in "ADMINISTRATOR" or "ADM1"?
Tks!
Rodrigo Garcone
Local Admin account was renamed at Default Domain Policy to ADM1. Need to enforce Local Administrators group to have a specific users and groups in it.
How Sould I input local admin account in restricted group gpo? Should I just type in "ADMINISTRATOR" or "ADM1"?
Tks!
Rodrigo Garcone
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thks iSiek for your reply, but I'm looking for for some feedback from someone who already has DC on Server Core.
There is a much easier way to accomplish what you want:
Create a group in AD and add required users to that group:
Set a startup script in group policy with the following line:
NET localgroup Administrators /add "domain_name\domain_group
That's it....the next time the computers are started, the group will be added to the local admin group.
If you want to configure restricted group refer this link:http://www.windowsecurity.com/articles/Using-Restricted-Groups.html