Home > IT Answers > Microsoft Windows > Restricted Groups
MithunMCSE
0 pts.
 Restricted Groups
Access, Active Directory, Altiris, Availability, Bandwidth, Benchmarking, Bind, Career development, DataCenter, Desktop management applications, Desktops, DHCP, DNS, Ethernet, Fault isolation, FDDI, Frame Relay, General Directories, H.323, Intel, IPv4, IPv6, LANDesk, LDAP, Lotus Domino, Management, Marimba, Microsoft Office, Microsoft Systems Management Server, Microsoft Windows, MPLS, NetBIOS, Network applications management, Network management software, Network monitoring, Network protocols, Network testing, Networking, Networking services, NFS, Novell, Novell IPX/SPX, Novell NDS, OS, Patch management, Performance management, Protocol analysis, Remote management, Security, Servers, SIP, SQL Server, TCP, Updates from SearchWindowsSecurity.com staff, Vector Networks, Windows
Hi Guys I have a query regarding the usage of restricted group in a domain enviroment. Could some pls explain the steps required to add Domain Administrator Account to the Local Administrators Groups of a node. I know this can be done but m not sure bout the steps. Please HELP!!!! Thanks Guys Asta La Vista Mithun

Software/Hardware used:
ASKED: October 10, 2005  3:33 AM
UPDATED: October 13, 2005  10:28 PM
RELATED QUESTIONS
Answer Wiki:
hope this helps ya out http://support.microsoft.com/default.aspx?scid=kb;en-us;555026 whiteboy
Last Wiki Answer Submitted:  October 10, 2005  9:11 am  by  Whiteboy444   0 pts.
All Answer Wiki Contributors:  Whiteboy444   0 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

 

You can also use the “Restricted Groups” settings in the “Security Settings” of a GPO or local machine security policy to forcibly set the members of local groups. The KB article in the previous post achieves roughly the same thing but using the approach above does not require runnings start-up script.

Amigus
 0 pts.
 

Keep in mind that Restricted Groups is destructive by nature. What that means is if you had group membership in the local ADMINISTRATORS groups of several computers in your environment, they would be wiped out and just those groups defined in the Restricted Groups would be replaced in it.

If you want to retain existing group membership, yet still add the Domain Admins group into the local ADMINISTRATORS groups, you should use a script. Check out SCRIPTINGANSWERS.COM or other similar web sites for some scripts that you can use.

TeslaGuy
 0 pts.
 

Hi Guys
Thx for the response tho i m aware of all the above replies. But could someone pls tell me the step by step method.
Thx
Mithun Kanji

MithunMCSE
 0 pts.