policies

Hello there,
I have 3 questions re. AD policies.
1. Can I set up a policy to have specific users local admins only to
their local machines[not to all machines] or this is not possible?
2. Where in W2K3 Gpedit group policies I can check for a policy that
automatically removes everyone from local admin group on local
machines, since this is the problem I am having?
3. If I set up a local XP machine policy will it get overwritten by AD
server policy at login?
Thank you, T

Meinolf
Thu Jun 19 13:31:29 PDT 2008

Hello Tester,

See inline

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hello there,
> I have 3 questions re. AD policies.
> 1. Can I set up a policy to have specific users local admins only to
> their local machines[not to all machines] or this is not possible?

You can according to this:
http://www.frickelsoft.net/blog/?p=13

But why will you do this?

> 2. Where in W2K3 Gpedit group policies I can check for a policy that
> automatically removes everyone from local admin group on local
> machines, since this is the problem I am having?

Configure restricted groups accoding to this and add only the accounts/groups
you like to have:
http://www.frickelsoft.net/blog/?p=13

> 3. If I set up a local XP machine policy will it get overwritten by AD
> server policy at login?

Yes.

> Thank you,

Tester
Fri Jun 20 09:09:36 PDT 2008

Hi,
Thank you very much!
I need it for some users that need to be local admins as required by
some applications. T