Remove users from local groups

G

Guest

I am currently trying to use restricted groups in nGPO to remove users that
are local administrators. I have successfully set up 2 restricted groups.

1. domainname\Domain Admins which are members of Administrators and
2. domainname\Domain Users which are members of Users.

I can see on the PC that this haas been enforced but the specific user that
has been made a local administrator (in the past) is not being removed from
the local administrator group.

Isn't this what is supposed to happen or am i missing something. Over time
quite a few users have been specified local admins and i need this to work to
revoke perms.

Any help appreciated.
 
J

Jerold Schulman

I am currently trying to use restricted groups in nGPO to remove users that
are local administrators. I have successfully set up 2 restricted groups.

1. domainname\Domain Admins which are members of Administrators and
2. domainname\Domain Users which are members of Users.

I can see on the PC that this haas been enforced but the specific user that
has been made a local administrator (in the past) is not being removed from
the local administrator group.

Isn't this what is supposed to happen or am i missing something. Over time
quite a few users have been specified local admins and i need this to work to
revoke perms.

Any help appreciated.
Click to expand...

See tip 3251 » Group Policy Restricted groups.
in the 'Tips & Tricks' at http://www.jsifaq.com

See tip 5319 » How do I create a global group, so that it is a member of the local administrators group on all workstations and member servers, by using group policy restricted groups?

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com
 
J

java321

Where did you apply the policy? At the domain level or OU level? OU policy
maybe blocking the domain policy from propagating.
 
G

Guest

So, the artivcle 3251 is telling me that to remove members i need to use the
top box 'members of this group', is that correct?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Retaining local administrator groups when using restricted groups. 1
Restricted Groups Problem 3
Can't view built-in groups in a remote domain 3
Local Admin & Group Policy Question 6
Restricted Groups...with exceptions 1
Restricted Groups: "Member of" and add Domain Groups to local Groups 1
Selective Local Admin by Restricted Groups policy 2
Removing domain local groups from Wind XP local administrators group 7

Top