Change group membership

[Guest]

I'm having w2k server and w2k workstations.Problem: cannot change domain user
to a local computer administrator by putting it to an administrators group on
local computer Error message is like "cannot acces "####" domain or smth.

Is the problem with qroup policy, or...

Please help!

 

[Jerold Schulman]

I'm having w2k server and w2k workstations.Problem: cannot change domain user
to a local computer administrator by putting it to an administrators group on
local computer Error message is like "cannot acces "####" domain or smth.

Is the problem with qroup policy, or...

Please help!

See tip 5319 in the 'Tips & Tricks' at http://www.jsiinc.com

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

 

[Guest]

Doesn't it put all users to an domain admins group?


# Right-click Restricted Groups (under Computer Configuration\Windows
Settings\Security Settings\Restricted Groups), and then click Add Group .


# Click Browse . Focused on the local computer, click the group to which you
want your global group to be a member (in this case, the "Administrators"
group), click ADD , and then click OK . You are returned to the group policy
and you see the administrators group listed in the Restricted Groups window.

thanks

 

[Jerold Schulman]

No.

It puts these users in a global group which is added to the local Administrators group on the workstations.

Doesn't it put all users to an domain admins group?


# Right-click Restricted Groups (under Computer Configuration\Windows
Settings\Security Settings\Restricted Groups), and then click Add Group .


# Click Browse . Focused on the local computer, click the group to which you
want your global group to be a member (in this case, the "Administrators"
group), click ADD , and then click OK . You are returned to the group policy
and you see the administrators group listed in the Restricted Groups window.

thanks

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

 

[Guest]

Sorry, bu it didn't help!

Trying to give user local admin. rights, occured an error!
The error message

"Processing of object /username/ failed with the following error:

The specified domain either does not exist or could not be contacted.


???

 

[Guest]

problem is solved by a temporary solution using command line

net localgroup "administrators" domain\username /add