Discussion Locked

Change group domain users

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a network that started with 10 PC's but has is now about 40 PC's, mainly W2K and WXP. In the beginning, I saw no issues in giving the domain users local admin rights, but I want to change this to power user rights. Is there a method for doing so for a range of PC's in one time remotely, or is there no other way than running around in order to change this?

5 replies

by bfilmfan

How exactly did you assign the rights? By placing the domain users group in every PC's local admins group?

Or did you assign the rights in the local security policy?

by b.sagaert

This is done by putting the domain users in the local admin group. Can it be done differently?

by trockii

You should be able to create a custom group, add all the users, then assign just power user rights to that group.

by sgt_shultz

we need more don't we? domain? AD? have you played around with remote administration. think bfilm wants us to get with the program and use policies and ad so we can stay in chair and eat popcorn and play on tech republic. about time they got you some training or at least some books of your choice, i say. ms is running a special on technet subscription and i think if we know what's good for us we will get us a sub.maybe you can get one for christmas lots of samples, policy templates and stuff hours. of fun....do you have couple computers for a 'lab'. cheat way is to put global domain group (build int one is called Domain Users. bet bfilm could tell us why not to use that one) into local power users group. at each machine. by running around. you could probably monitor the registry changes and try to do it batchfully that way but whew. but real net admins don't cheat so hope bfilm will take all my points soon and help us set up my 2003 ad with policies and stuff. i will post my questions soon....

by cg it

well you could try remote connect to another computer under computer management,, then go into users and groups and change the accounts that way.....but... I gotta ask, I really do...why did put domain user accounts in the local machine admin account?

This discussion is closed to new replies.