Remove users from local groups

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I am currently trying to use restricted groups in nGPO to remove users that
are local administrators. I have successfully set up 2 restricted groups.

1. domainname\Domain Admins which are members of Administrators and
2. domainname\Domain Users which are members of Users.

I can see on the PC that this haas been enforced but the specific user that
has been made a local administrator (in the past) is not being removed from
the local administrator group.

Isn't this what is supposed to happen or am i missing something. Over time
quite a few users have been specified local admins and i need this to work to
revoke perms.

Any help appreciated.
 
I am currently trying to use restricted groups in nGPO to remove users that
are local administrators. I have successfully set up 2 restricted groups.

1. domainname\Domain Admins which are members of Administrators and
2. domainname\Domain Users which are members of Users.

I can see on the PC that this haas been enforced but the specific user that
has been made a local administrator (in the past) is not being removed from
the local administrator group.

Isn't this what is supposed to happen or am i missing something. Over time
quite a few users have been specified local admins and i need this to work to
revoke perms.

Any help appreciated.

See tip 3251 » Group Policy Restricted groups.
in the 'Tips & Tricks' at http://www.jsifaq.com

See tip 5319 » How do I create a global group, so that it is a member of the local administrators group on all workstations and member servers, by using group policy restricted groups?

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com
 
Where did you apply the policy? At the domain level or OU level? OU policy
maybe blocking the domain policy from propagating.
 
So, the artivcle 3251 is telling me that to remove members i need to use the
top box 'members of this group', is that correct?
 
Back
Top