Restricted Groups

[Srinivas Acharya]

Hi,
I have added the domain user to local administrator group
of all the PCs coming under one OU with the help of
restricted groups. but now I have moved that PC from that
OU. But still that user is in the administrator group of
those PCs. Why still that user is having admin previleges
even though that user is no more in that OU. Please any of
you could address this issue?.
Regards,
Srinivas Acharya

 

[Steven L Umbach]

Not all security policy settings are removed when a computer is remove form the scope
of the policy. Restricted groups is one of them, and file/registry permissions is
another. Settings under administrative templates are usually changed to reflect the
Local Group Policy setting if the new location has an undefined setting in the
PO. --- Steve

 

[ptwilliams]

This is called registry tattooing!! Have a look at this great resource from
*the* GPO man:
-- http://207.104.31.209/gpoguy/FAQs/tattoo.htm

--

Paul Williams
_________________________________________
http://www.msresource.net


Join us in our new forums!
http://forums.msresource.net
_________________________________________


Not all security policy settings are removed when a computer is remove form
the scope
of the policy. Restricted groups is one of them, and file/registry
permissions is
another. Settings under administrative templates are usually changed to
reflect the
Local Group Policy setting if the new location has an undefined setting in
the
PO. --- Steve