Administrative rights

[Andymackk]

I have added in all the 2nd line supporters in my company to a
security group called Helpdesk.
In GP I have added in the helpdesk group to the administrators group
within restricted groups in a workstations OU where all the computer
accounts are held.
The group gets added in to the administrators group ok, and most
functions are available, but there are some programs ( such as windows
updates) that wont run due to no permissions. Logging in as the local
admin doesn't work either. Only If I log in as myself (Enterprise
admin) will it work. Any ideas what I have done wrong?

Thanks for any help

 

[Steven L Umbach]

Using restricted groups can remove all other users/groups from the local
administrators group [other that built in administrator I believe]. If not doing such
already, make sure that the group you created is a domain global group for your
helpdesk and also include domain admins and administrator in the restricted groups
entry for administrators for that OU. --- Steve