Problem with restricted groups

[Guest]

I need to give a group of domain users Local Admin rights.

this is what I have done so far with NO LUCK!
1- Created an OU for the computers.
2- Created a GPO and linked to the above OU
3- Under restricted groups added "Administrators" and members "domain
admion" and "Domain\Local_Admin".
4- Logged into the workstation with a domain user account.
5- Tried to add a new hardware.
It doesn't work.

what am I missing? where did it go wrong?

 

[Jerold Schulman]

I need to give a group of domain users Local Admin rights.

this is what I have done so far with NO LUCK!
1- Created an OU for the computers.
2- Created a GPO and linked to the above OU
3- Under restricted groups added "Administrators" and members "domain
admion" and "Domain\Local_Admin".
4- Logged into the workstation with a domain user account.
5- Tried to add a new hardware.
It doesn't work.

what am I missing? where did it go wrong?

See tip 5319 » How do I create a global group, so that it is a member of the local administrators group on all workstations and member servers, by using group policy restricted groups?
in the 'Tips & Tricks' at http://www.jsifaq.com

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com

 

[Florian Frommherz]

Howdy!

this is what I have done so far with NO LUCK!
1- Created an OU for the computers.
2- Created a GPO and linked to the above OU
3- Under restricted groups added "Administrators" and members "domain
admion" and "Domain\Local_Admin".
4- Logged into the workstation with a domain user account.
5- Tried to add a new hardware.
It doesn't work.

Make sure that you chose the "Administrators"-group of one of the
clients and not the built-in "Administrators"-group of Active Directory..

cheers,

Florian

 

[Paul Bergson]

If this small group of users is to be given local admin to all machines in
an ou, it would be real simple for you to just use restricted groups. This
policy setting places all users or groups defined in the policy to be
members of the group defined to the local group you desire. In this case it
could be the local admins group.

http://support.microsoft.com/Default.aspx?kbid=279301

http://technet2.microsoft.com/Windo...eb36-4433-b3fe-1b1a15c18f6a1033.mspx?mfr=true

--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup

This posting is provided "AS IS" with no warranties, and confers no rights.