Local users lost admin rights - where can i fix it?

[Zbynek Friml]

We have domain on w2000 server. I need user with local administrator
rights, but when i create it and move in group "Administrators", after
some time user move from group "Administrators" to "Users". Can anyone
help me where can i change it? Thanks
Zbynek

 

[Norbert Fehlauer [MVP]]

Zbynek Friml wrote:
Hi,

We have domain on w2000 server. I need user with local administrator
rights, but when i create it and move in group "Administrators", after
some time user move from group "Administrators" to "Users". Can anyone
help me where can i change it?

Seems like you or your domain administrator configured a gpo which uses
restricted groups. Take a look at your GPOs.

HTH
Norbert

 

[Zbynek Friml]

Norbert Fehlauer [MVP] napsal(a):

Zbynek Friml wrote:
Hi,



Seems like you or your domain administrator configured a gpo which uses
restricted groups. Take a look at your GPOs.

HTH
Norbert

Hi, in restricted groups we have 2 entries - "Administrators" - contains
groups which are on all workstations local admins and "*S-1-5-32-547" -
contains Authenticated users and Domain users. If i remove the second
one, it will work as i wish?

 

[Norbert Fehlauer [MVP]]

Zbynek Friml wrote:
Hi,

Hi, in restricted groups we have 2 entries - "Administrators" -
contains groups which are on all workstations local admins and
"*S-1-5-32-547" - contains Authenticated users and Domain users. If i
remove the second one, it will work as i wish?

Second is to put all authenticated and Domain users (wouldn't suggest to use
this anyway) into the powerusers group.
http://support.microsoft.com/kb/825069/en-us

You can use restricted groups in to ways. Either to replace existing (this
is what you have now) or to add without modifying existing groupmembers.
Just read the Windows Server help or XP (restricted groups gives enough hits
to help you out)

Bye
Norbert