Results 1 to 9 of 9

Thread: GPO Restricted Group for 'Local Admins'

  1. #1
    Florian Frommherz Guest
    Can you use the GPO 'Restricted Groups' setting for local groups?

    I need to place the 'Domain Admin' global group back into the 'Local Admins'
    on computers with users who have local admin rights -> hmmm :-(

    The Online Help for this topic says 'Local Groups' are not supported, which
    is confirmed by my testing. Is there a work around?

  2. #2
    jwd Guest

    RE: GPO Restricted Group for 'Local Admins'

    When specifying the local Administrators group type builtin\administrators
    rather than going to Browse and selecting Administrators.

  3. #3
    AdamV Guest

    RE: GPO Restricted Group for 'Local Admins'

    Or use the 'browse', but change the source in the "select objects from..."
    box (as long as you are not on a DC at the time, you will get the local
    accounts list to choose from)
    Don't forget that restricted groups does a rip-and-replace, not a merge.

  4. #4
    Cosmo Guest

    RE: GPO Restricted Group for 'Local Admins'

    Thank U, using 'builtin\Administrators' on a non DC server worked. :-)

  5. #5
    Join Date
    Feb 2009
    Posts
    3

    Re: GPO Restricted Group for 'Local Admins'

    Ok, I can see restrictive groups for the whole domain but how do I get to the one in OU? (Using server 2008)

    I used gpedit.msc and can't see restrictive groups when I go in there... Please help, I think I understand the rest, I am just not sure which restrictive groups to put it in...

  6. #6
    Marcin Guest

    Re: GPO Restricted Group for 'Local Admins'

    Use Group Policy Management Console rather that gpedit.msc. Refer to
    http://technet.microsoft.com/en-us/l.../cc759123.aspx

  7. #7
    Join Date
    Feb 2009
    Posts
    3

    Re: GPO Restricted Group for 'Local Admins'

    From the looks of the article, it says not to edit the default domain policy... is the best practice here just to create a new policy for your company and leave the defaults in place? (It's a small shop of about 30 people and only 15 computers).

  8. #8
    Marcin Guest

    Re: GPO Restricted Group for 'Local Admins'

    That would be my recommendation. It makes it easier to fall back to the
    original state in case of problems...

  9. #9
    Join Date
    Feb 2009
    Posts
    3

    Re: GPO Restricted Group for 'Local Admins'

    Thank you for your help.

Similar Threads

  1. How to setup Local Admins with the help of active Directory
    By hANIMA in forum Networking & Security
    Replies: 4
    Last Post: 19-05-2011, 12:28 PM
  2. Add domain user\group to local admin group problem
    By Landon in forum Active Directory
    Replies: 3
    Last Post: 16-10-2009, 09:30 PM
  3. VB. List the userID from group (Domain Admins set as Primary group)
    By epremyan karapet in forum Software Development
    Replies: 1
    Last Post: 12-10-2009, 07:26 PM
  4. Builtin\administrators group vs domain admins group
    By weaverbeaver in forum Windows Server Help
    Replies: 4
    Last Post: 14-01-2009, 05:07 AM
  5. Replies: 2
    Last Post: 04-07-2008, 06:10 AM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,675,913,366.86410 seconds with 17 queries