Manage remote workstations

[Mike]

An IT dept, who are not members of Domain Admins but are
Acount Operators, Server Operators etc, need to manage
remote workstations. The requirement is to start/stop
services etc.
Can this be done while not domain admins? Is it possible
to manage a remote workstation by passing the remote local
admin credentials?

Any help appreciated.

 

[Igor Fomin]

The right way is to create a special group, for example OfficeAdmins, and
put such staff here.
Then using Group Policies put this group to Local Administrators on your
workstations.

(Computer Configuration -> Windows Settings -> Restricted Groups).

 

[Guest]

I have listed IT as a restricted group and put in the
members. How do I assign this to all workstation local
administrator groups through GPO?

 

[Brian Desmond [MVP]]

You would add the administrators group to the list, and then define all the
members.

Keep in mind that this policy overrides the group membership that already
exists. It will remove all the members and force the contents of the GPO to
be added.

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com

 

[Guest]

Restricted groups WILL remove whatever group that is currently configured locally on the machine..

use this script with machine startup script GPO (since this will not require runas or credentials - as it runs under SYSTEM context

http://support.microsoft.com/default.aspx?scid=kb;en-us;55502

O

easier still..create abatch file... with net localgroup administrators globalgroupname /ad

your choice...vbs...or batching