urgent question

  • Thread starter Thread starter Arsen
  • Start date Start date
A

Arsen

I have created a group called "Super Users" in my Win2000 domain. There are
couple of users in this group ie: User1, User2. Now, with a batch file that
reads "net localgroup "Administrators" "qlimg.com\Super Users" /add" which
adds this "Super Users" to the local administrator group, I have succeeded
in what I'm looking to do. However, after some time the "Super Users" group
gets removed from the workstation and I know it has something to do with the
policy called "Restricted Group". What can I do to that policy so the
"Super Users" group will stay on the workstation?



thanks
 
You will need to Add the Super Users group to the Restricted Group policy
you are using for the Administrators group.
 
Wouldn't this give the members in the "Super Users" group, ability to become
a global domain administrator?


Richard McCall said:
You will need to Add the Super Users group to the Restricted Group policy
you are using for the Administrators group.

--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."
Arsen said:
I have created a group called "Super Users" in my Win2000 domain. There are
couple of users in this group ie: User1, User2. Now, with a batch file that
reads "net localgroup "Administrators" "qlimg.com\Super Users" /add" which
adds this "Super Users" to the local administrator group, I have succeeded
in what I'm looking to do. However, after some time the "Super Users" group
gets removed from the workstation and I know it has something to do with the
policy called "Restricted Group". What can I do to that policy so the
"Super Users" group will stay on the workstation?



thanks
Click to expand...
Click to expand...
 
You only apply this to non-DCs

--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."
Arsen said:
Wouldn't this give the members in the "Super Users" group, ability to become
a global domain administrator?


Richard McCall said:
You will need to Add the Super Users group to the Restricted Group policy
you are using for the Administrators group.

--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."
Arsen said:
I have created a group called "Super Users" in my Win2000 domain.
Click to expand...
There
are
couple of users in this group ie: User1, User2. Now, with a batch file that
reads "net localgroup "Administrators" "qlimg.com\Super Users" /add" which
adds this "Super Users" to the local administrator group, I have succeeded
in what I'm looking to do. However, after some time the "Super Users" group
gets removed from the workstation and I know it has something to do
Click to expand...
with
the
policy called "Restricted Group". What can I do to that policy so the
"Super Users" group will stay on the workstation?



thanks
Click to expand...
Click to expand...
Click to expand...
 
Richard, thank you for yor time and effort...
however, this may sound a little stupid but how do you apply a domain policy
on non-dc's?


Richard McCall said:
You only apply this to non-DCs

--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."
Arsen said:
Wouldn't this give the members in the "Super Users" group, ability to become
a global domain administrator?


Richard McCall said:
You will need to Add the Super Users group to the Restricted Group policy
you are using for the Administrators group.

--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."
I have created a group called "Super Users" in my Win2000 domain. There
are
couple of users in this group ie: User1, User2. Now, with a batch file
that
reads "net localgroup "Administrators" "qlimg.com\Super Users" /add" which
adds this "Super Users" to the local administrator group, I have succeeded
in what I'm looking to do. However, after some time the "Super Users"
group
gets removed from the workstation and I know it has something to do with
the
policy called "Restricted Group". What can I do to that policy so the
"Super Users" group will stay on the workstation?



thanks
Click to expand...
Click to expand...
Click to expand...
 
Back
Top