policy question

  • Thread starter Thread starter Tester
  • Start date Start date
T

Tester

Hello there,
How can I check if there is a policy that removes the local admin
privileges of the AD user that logs on to the AD domain? Some users
might need local admin privileges for some applications to work
properly.
Also, can I enable some local computer policy on the user XP machine
to override the above?
I have an AD domain with multiple sites and OUs.
Thanks, T
 
Howdie!

Tester schrieb:
> How can I check if there is a policy that removes the local admin
> privileges of the AD user that logs on to the AD domain? Some users
> might need local admin privileges for some applications to work
> properly.
> Also, can I enable some local computer policy on the user XP machine
> to override the above?
> I have an AD domain with multiple sites and OUs.

The checking you can only perform with rsop.msc.
You can, however asure that particular users are members of the local
administrator's group by using the new Group Policy Preferences or
"legacy" Group Policy with the Restricted Groups feature. It basically
adds or replaces members of a machine's "Administrator" group (or every
other group):

http://www.frickelsoft.net/blog/?p=24

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Use a newsreader! http://www.frickelsoft.net/news.html
 
Back
Top