ACL Local Groups

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I wanted to ristrict the local groups creation with minimum rights, which rights are at minimal needed for creating local groups.

thanx,

arjan
 
I believe only administrators can create local groups on a computer. A power user can
create and manage users it creates. --- Steve

arjan said:
I wanted to ristrict the local groups creation with minimum rights, which rights
Click to expand...
are at minimal needed for creating local groups.
 
I believe only administrators can create local groups on a computer. A power >user can create and manage users it creates.

So i can't create a global AD group which can create local groups, only if the are members of the local administrators group ?

arjan
 
Global groups are created on domain controllers only and can be added to local groups
on domain members. So if I understand your question, then yes you must be a local
administrator to add domain global groups to a local group on that domain member or
it can be done with a startup script using Group Policy which runs in system context.
By default the domain admins are in the local administrators group on domain
embers. --- Steve


arjan said:
user can create and manage users it creates.

So i can't create a global AD group which can create local groups, only if the are
Click to expand...
members of the local administrators group ?
 
Back
Top