urgent question

[Arsen]

I have created a group called "Super Users" in my Win2000 domain. There are
couple of users in this group ie: User1, User2. Now, with a batch file that
reads "net localgroup "Administrators" "qlimg.com\Super Users" /add" which
adds this "Super Users" to the local administrator group, I have succeeded
in what I'm looking to do. However, after some time the "Super Users" group
gets removed from the workstation and I know it has something to do with the
policy called "Restricted Group". What can I do to that policy so the
"Super Users" group will stay on the workstation?



thanks

 

[Richard McCall [MSFT]]

You will need to Add the Super Users group to the Restricted Group policy
you are using for the Administrators group.

 

[Arsen]

Wouldn't this give the members in the "Super Users" group, ability to become
a global domain administrator?

You will need to Add the Super Users group to the Restricted Group policy
you are using for the Administrators group.

--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."

I have created a group called "Super Users" in my Win2000 domain. There are
couple of users in this group ie: User1, User2. Now, with a batch file that
reads "net localgroup "Administrators" "qlimg.com\Super Users" /add" which
adds this "Super Users" to the local administrator group, I have succeeded
in what I'm looking to do. However, after some time the "Super Users" group
gets removed from the workstation and I know it has something to do with the
policy called "Restricted Group". What can I do to that policy so the
"Super Users" group will stay on the workstation?



thanks

 

[Richard McCall [MSFT]]

You only apply this to non-DCs

--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."

Wouldn't this give the members in the "Super Users" group, ability to become
a global domain administrator?

You will need to Add the Super Users group to the Restricted Group policy
you are using for the Administrators group.

--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."

I have created a group called "Super Users" in my Win2000 domain.

There
are

couple of users in this group ie: User1, User2. Now, with a batch file that
reads "net localgroup "Administrators" "qlimg.com\Super Users" /add" which
adds this "Super Users" to the local administrator group, I have succeeded
in what I'm looking to do. However, after some time the "Super Users" group
gets removed from the workstation and I know it has something to do

with
the

policy called "Restricted Group". What can I do to that policy so the
"Super Users" group will stay on the workstation?



thanks

 

[Arsen]

Richard, thank you for yor time and effort...
however, this may sound a little stupid but how do you apply a domain policy
on non-dc's?

You only apply this to non-DCs

--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."

Wouldn't this give the members in the "Super Users" group, ability to become
a global domain administrator?

You will need to Add the Super Users group to the Restricted Group policy
you are using for the Administrators group.

--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."
I have created a group called "Super Users" in my Win2000 domain. There
are
couple of users in this group ie: User1, User2. Now, with a batch file
that
reads "net localgroup "Administrators" "qlimg.com\Super Users" /add" which
adds this "Super Users" to the local administrator group, I have succeeded
in what I'm looking to do. However, after some time the "Super Users"
group
gets removed from the workstation and I know it has something to do with
the
policy called "Restricted Group". What can I do to that policy so the
"Super Users" group will stay on the workstation?



thanks