Remove From My Forums. Answered by:. Archived Forums. Sign in to vote. How can I do this? Thanks a regards. Thursday, December 3, PM. Friday, December 4, AM. You may forget who has local admins rights and will have to run various scripts to determine it. Local admin rights is a terrible Idea for all users for a ridicules amount of reasons.
Letting user run it with admin right while still being a regular user. The also does not require any extra steps for adding new users. I tried what Kriz suggested but it gives the user full admin rights to the domain which i dont want. I am running server R2. Does anyone have a login script that can give users local admin rights without giving them full domain rights?
I have tried this but couldnt get it working. Im new at scripts never had to use them before. How do you verify that user has domain admin rights? Perhaps your local admin groups are part of domain admin group?
As I've said before, domain users in local admin groups on all machines will be able to do exactly the same things domain admin can do on all machines locally and remotely but servers, assuming the GPP option we're talking about doesn't apply to your servers. If it does, guess what. Giving staff local admin rights via group policy and login script, enables them to have access to folders on my domain that they are not apart of. For example. However when i enable the local admin policy you suggested, they can then access all shared folders on the server.
Which pretty much blows security out of the window. That is because you are applying the Group Policy to a Group Policy Object that is applied to the servers also. Seriously look at the free Privelage Manager. It's very easy to use and far safer than giving every one admin rights!
Ok then i have another question. If i want to remove the users from this policy so they no longer have admin rights. How do I do this? I have tried removing the group from the Policy and also just deleting the policy but the users still have admin rights. Just like above, but instead of choosing 'add to this group' in window, where you select users to add, you choose 'remove from this group' and then select users to remove from local admin group.
To continue this discussion, please ask a new question. Get answers from your peers along with millions of IT pros who visit Spiceworks. Spiceworks Help Desk. The help desk software for IT. Track users' IT needs, easily, and with only the features you need. Learn More ». Krizz This person is a verified professional. The Users and Groups snap-in allows you to create new local users, change the settings name, password, etc. November 22, November 22, November 19, November 19, November 14, November 14, Since it's also a lead designer for many App and games for Android, iOS and Windows Phone mobile devices for a number of italian companies.
But how? What the purpose of this article then? Shame… Now, let me close it and Google again for a more useful one….
0コメント