How to prevent workstation administrator from removing Domain admins from local administrators grou

B

beau

We had about 50 computers in a windows2000 domain, and I am the domain
admin, for convenience's sale, I gave workstation local administrator rights
to some fellows so that they can install softwares as need.
but someone removed the domain admins from the workstation local
administrators group,and I lost the control of that workstation and I had to
logon with local administrator account and add it back. Is there anyway in
GPO to prevent this from happening?
 
J

Jerold Schulman

We had about 50 computers in a windows2000 domain, and I am the domain
admin, for convenience's sale, I gave workstation local administrator rights
to some fellows so that they can install softwares as need.
but someone removed the domain admins from the workstation local
administrators group,and I lost the control of that workstation and I had to
logon with local administrator account and add it back. Is there anyway in
GPO to prevent this from happening?
Click to expand...


See tip 5319 in the 'Tips & Tricks' at http://www.jsiinc.com

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Removing domain local groups from Wind XP local administrators group 7
Selective Local Admin by Restricted Groups policy 2
Setting up local machine admins from GPO 3
Domain Administrator Locked Out - Please Help!!! 7
Retaining local administrator groups when using restricted groups. 1
Unabled to logon interactively after joining a domain 1
Local admin accounts gone haywire 8
Domain security group to All Computer Local Administrator Group 1

Top