Local users lost admin rights - where can i fix it?

  • Thread starter Thread starter Zbynek Friml
  • Start date Start date
Z

Zbynek Friml

We have domain on w2000 server. I need user with local administrator
rights, but when i create it and move in group "Administrators", after
some time user move from group "Administrators" to "Users". Can anyone
help me where can i change it? Thanks
Zbynek
 
Zbynek Friml wrote:
Hi,
We have domain on w2000 server. I need user with local administrator
rights, but when i create it and move in group "Administrators", after
some time user move from group "Administrators" to "Users". Can anyone
help me where can i change it?
Click to expand...

Seems like you or your domain administrator configured a gpo which uses
restricted groups. Take a look at your GPOs.

HTH
Norbert
 
Norbert Fehlauer [MVP] napsal(a):
Zbynek Friml wrote:
Hi,



Seems like you or your domain administrator configured a gpo which uses
restricted groups. Take a look at your GPOs.

HTH
Norbert
Click to expand...

Hi, in restricted groups we have 2 entries - "Administrators" - contains
groups which are on all workstations local admins and "*S-1-5-32-547" -
contains Authenticated users and Domain users. If i remove the second
one, it will work as i wish?
 
Zbynek Friml wrote:
Hi,
Hi, in restricted groups we have 2 entries - "Administrators" -
contains groups which are on all workstations local admins and
"*S-1-5-32-547" - contains Authenticated users and Domain users. If i
remove the second one, it will work as i wish?
Click to expand...

Second is to put all authenticated and Domain users (wouldn't suggest to use
this anyway) into the powerusers group.
http://support.microsoft.com/kb/825069/en-us

You can use restricted groups in to ways. Either to replace existing (this
is what you have now) or to add without modifying existing groupmembers.
Just read the Windows Server help or XP (restricted groups gives enough hits
to help you out)

Bye
Norbert
 
Back
Top