Avatar of tolinrome
tolinrome
Flag for United States of America asked on

GPO to add domain admin to local admin

Is there a GPO that I can add the Domain Admins group to all the local admins group on all computers? DC's are 2008 and clients are XP and Win7. Thanks.
Active DirectoryWindows Server 2008

Avatar of undefined
Last Comment
motnahp00

8/22/2022 - Mon
motnahp00

Consider implementing a GPO with Restricted Groups.
remmett70

Domain Admins by default get added to the local computer Admins group when a computer/server is added to the domain.  Has is been manually removed?
motnahp00

All Domain Admins are members of the local group.

You can verify this with the following command:

net localgroup Administrators
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
Brian Pierce

By Default Domain Admins are already local admins
tolinrome

ASKER
I thought they did as well, but at least on one PC it's not. This is a problem since a user will be logged on then a Domain Admin comes by and cannot log them off and has to shut down the computer and log back in.
So how can I just create a GPO that will cover all that?
ASKER CERTIFIED SOLUTION
remmett70

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
motnahp00

New GPO

Name: Restricted Groups

Computer Configuration -> Windows Settings -> Security Settings -> Restricted Groups -> Right-click Add Group -> Type Administrators (DO NOT Browse) -> click Add for members of this group and Click Add -> Browse for Domain Admins
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.