General discussion

Locked

Group Policy

By Sameh Fouad ·
I administer a Windows 2003 domain, when I want to make the user a restricted, power user or an administrator on his PC, I have to log on to his machine locally and do this, Can I configure the Default Domain Policy to make this centrally but I want to remain as an administrator on all machines?

This conversation is currently closed to new comments.

8 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by entawanabi In reply to Group Policy

You will have to go to the people who own the system and employ you to get permission to change thios practice as they are most likely the ones who require this security measure.

Collapse -

by Sameh Fouad In reply to

Poster rated this answer.

Collapse -

by Sameh Fouad In reply to

Poster rated this answer.

Collapse -

by davebkelly In reply to Group Policy

One way around this is to use user groups. Its a pain in the first instance but it pays in the long run.

What you do is create 2 or 3 groups in your AD. I will call them locAdmin, locPower and LocRestrict here. Then you add these groups to the appropriate local groups on the client machines.

Once this is done, all you need to do is add the user to the appropriate group to give them the local group admission.

i.e. user JSMITH is in Domain Users and LocRestrict but he now needs power user rights. All you need to do is go into AD U & C and add him to the LocPower group........ a quick log off / on again will do the trick and you dont have to bother to visit the desktop.

With regards to you always being a local admin, just add yourself to the Locadmin group.....

Collapse -

by Sameh Fouad In reply to

Poster rated this answer.

Collapse -

by Sameh Fouad In reply to

Poster rated this answer.

Collapse -

by Sameh Fouad In reply to Group Policy

This question was closed by the author

Collapse -

by Sameh Fouad In reply to Group Policy

This question was closed by the author

Back to Windows Forum
8 total posts (Page 1 of 1)  

Related Discussions

Related Forums