[gptalk] Re: Restricted Groups

  • From: "Nelson, Jamie R Contr OC-ALC/ITMA" <Jamie.Nelson.ctr@xxxxxxxxxxxxx>
  • To: "'gptalk@xxxxxxxxxxxxx'" <gptalk@xxxxxxxxxxxxx>
  • Date: Mon, 16 Oct 2006 15:11:11 -0500

When you use restricted groups the local membership of the group will mirror
what is defined in Group Policy on any workstation that is within the scope
of the GPO.


You could remove the unwanted users by configuring the membership of the
Administrator group to nothing, but the removal of the existing local admins
you had setup before this happened is probably not reversible. I can't think
of a way you could get them back.






From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Ray Lewis
Sent: Monday, October 16, 2006 2:32 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Restricted Groups


Hi guys...


It would seem as though some particular users have been applied to the local
admins groups to all clients across our domain. This has been initiated via
the Restricted Groups option within Group Policy but has now caused all the
existing local admins to be removed from the clients. Despite removing the
applicable users from the Restricted Groups and setting the GPO back to not
configured, they're still applied. Is there a way to set this back to the
previous state? Any advice would be greatly appreciated.





Other related posts: