Link to home
Start Free TrialLog in
Avatar of sunhux
sunhux

asked on

How to add back "NT Authority\..." to local Users group in PCs

In an attempt to stop all domain users from login to a few critical financial processing PCs (that handles large payments amounts), I've removed "Domain Users" & the following 2 & it worked:
  1. NT AUTHORITY\Authenticated Users (S-1-5-11)
  2. NT AUTHORITY\INTERACTIVE (S-1-5-4)

How do I add them back?  When I enter the above verbatim, it doesn't list them though
"Domain Users" are listed & I could add it back.  A couple of PCs are non-payment PCs
& I accidentally removed the above 2 & Domain Users   from the local "Users" group
SOLUTION
Avatar of Dr. Klahn
Dr. Klahn

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
You can use Group Policy and use Restricted Groups feature to update membership of local groups.
http://techgenix.com/Using-Restricted-Groups/
Avatar of sunhux
sunhux

ASKER

We don't take  bare metal backups on PCs
Avatar of sunhux

ASKER

Will try Peter's suggestion / link.

Btw, what are the 2  NT Authority\  groups for or what's their function?
If I don't restore them back, what's the impact / implication
Use system restore?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of sunhux

ASKER

NVIT,  why need to specify folder_name?  When I remove the 2  "NT Authority\..."  from
local Users group, there' s no folder_name associated with them
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial