Support Staff

  • Thread starter Thread starter Daniel Padilla
  • Start date Start date
D

Daniel Padilla

I want to create a policy for a group of users that are part of the Tech Support Staff and make them local administrators on all available desktops in the domain so i don't have to gave them "Domain Administrators" access so they can perform their job without any problems.


Any idea on how to achieve this ?

Thanks in advance.

DANIEL
 
Daniel,

Please take a look at the Restricted Groups policy. Here is the MSKB Article that will help you:

http://support.microsoft.com/?id=320045

Please be aware that by doing this - without applying the update - that you will flush the local Administrators group of all members and replace it with the Security Group that you specify in this policy.

You might not want this ( think about what it does: the Domain Admins group is a member of the local Administrators group on all WIN2000 and WINXP Pros systems! ).

Please take a look at the following MSKB Article for the hotfix ( which requires a call to MS PSS - at no cost to you! ):

http://support.microsoft.com/?id=810076

HTH,

Cary

I want to create a policy for a group of users that are part of the Tech Support Staff and make them local administrators on all available desktops in the domain so i don't have to gave them "Domain Administrators" access so they can perform their job without any problems.


Any idea on how to achieve this ?

Thanks in advance.

DANIEL
 
Back
Top