[gptalk] Re: Domain Admins are not Local Admins

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Mon, 18 Dec 2006 07:05:47 -0800


I've not heard of that one-if you don't have Restricted Groups somewhere in
there, then I'm at a loss.




From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Ray Lewis
Sent: Sunday, December 17, 2006 6:38 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Domain Admins are not Local Admins 


Hi Guys


Not sure if this is exactly GPO related or whether the domain GP is screwed,
but when a computer joins our domain, the Domain Administrator and members
of the Domain Admins Group are added to the local machine as a Debugger
User. By default, these should be in the Local Admins group. 

Restricted groups within the Domains Group Policy is not active.. 

Any ideas?




Other related posts: