Networks

Ask something
Discussion Locked

Local Admins

0 helpful
1 reply

by aparikh

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a problem, where I am trying to make enterprise admins, the admin to all computers, plus we have a small group called onevision which needs to be admins to our development environment. So I did this in GP, but the problem I forgot about is that we run a application which will be killed in june of 05, but right now users who use it need to have local admin rights on their machine, but Group policy erases their account. I need to know if scripting is a better solution so it doesnt erase preset local user rights. If so how do i Do it.

1 reply

by bfilmfan

If you add the Enterprise Admins group to the Domain Admins group for the domain, they will have rights on the local workstations.

In the GPO, did you assign the rights under User Rights Assignments and Security Options. From your comment, it appears that this was set in a policy which is being overwritten by another policy.

Where did you set the policy? At the Local, Site, Domain or Organizational Unit level?

My recommendation is that you set a policy affecting the entire environment at the Domain Level and set the policy to No OverRide.

This discussion is closed to new replies.