asked on
Is there any built in group within AD for local administrator?
Is there any built in group within AD that will grant the members local administrative permission on computers in the domain?
I will appreciate any guidance!
I will appreciate any guidance!
Active DirectoryWindows Server 2008Windows 7
Last Comment
McKnife
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
McKnife is correct there.
@LuiLui77
Do you really want to grant users as Domain Admins?
A Domain Admin is more than a local Administrator.
Windows Built-in Users and Default Groups http://ss64.com/nt/syntax-security_groups.html
@LuiLui77
Do you really want to grant users as Domain Admins?
A Domain Admin is more than a local Administrator.
Windows Built-in Users and Default Groups http://ss64.com/nt/syntax-security_groups.html
ASKER
Is just local administration of the client machines, not to domain or servers
Then the approach as described by awawada should be used and the ´GPO should of course only be applied to an OU with client computers, not servers.
Whether it is sensible to use that group for client administration is another question.