Group policy stops domain admins adding hardware / software

  • Thread starter Thread starter Chris Pratt
  • Start date Start date
C

Chris Pratt

Hi all,

We have just set-up GP on our AD domain. But now when a domain admin logs
onto the computer and go to device manager it warns them they cannot add
drivers / change hardware. And when trying to install and MSI (In this case
vertias winstall le) it says they need admin rights.

Please help!!

Chris Pratt - MCP
 
I would verify that the Domain\Domain Admins group is still in the local
Adminsitrators group. It is put there by default during a workstation
domain join.
 
Hi Chris-

It's possible that the default permissions on the %systemroot% directories
or the registry have been altered. You may consider resetting them to
default using the syntax below of this is a workstation:

"secedit /configure /DB secedit.sdb /CFG C:\winnt\inf\defltwk.inf /log
secedit.log /verbose"

Let us know if that helps or not.
 
Back
Top