Questions

Local admin rights as GPO

+
0 Votes
Locked

Local admin rights as GPO

kevin
I have created a local admin group policy giving a group admin rights over an OU (this is to be for our help desk). Some of our software programs require users to have local admin access as well (so I give it to them through their domain account on the local PC-I don't want to add them to help desk group and local admin on all the OU PCs). The problem is that the following day they are automatically removed from the local machine's list of administrators. I have this set up in a beta environment so we don't have to go to each machine, each day, to add them back in. Any ideas on how to block this? I have tried to turn "no override" on in the GP options, but this too disappears the following day. Is there anyway I can speed up whatever cycle time it is on so that I don't have to wait a day to see if it works? (I always do a forced update after I make changes). Thanks in advance.