+ Post New Thread
Results 1 to 9 of 9
Windows 7 Thread, A couple of questions.... in Technical; I wonder if anyone can help me with a couple of questions: 1. What is the GPO setting to add ...
  1. #1

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,260
    Thank Post
    965
    Thanked 324 Times in 192 Posts
    Blog Entries
    11
    Rep Power
    164

    A couple of questions....

    I wonder if anyone can help me with a couple of questions:

    1. What is the GPO setting to add Domain Admins to the Local Admin security group? I've set:

    Computer Configuration > Preferences > Control Panel Settings > Local Users and Groups

    I've added 'Domain Admins' to the 'Administrators (built-in_ group'.


    2. The second problem is the mapping of drives. It doesn't seem to be happening. I'm not sure what I'm meant to do. I've set the user policy to pick up with a 'Replace' action. I can access the drives through the normal run command

  2. #2
    bio
    bio is offline
    bio's Avatar
    Join Date
    Apr 2008
    Location
    netherlands
    Posts
    520
    Thank Post
    16
    Thanked 130 Times in 102 Posts
    Rep Power
    37
    for q1: How to Add domain accounts to Local Administrators Group using GPO - Richard's myITforum Blog
    for q2 : I allways create logon scripts that maps drives. Its easy to create and placed in the netlogon folder and no GPO needed at all.

    bio..

  3. #3

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,260
    Thank Post
    965
    Thanked 324 Times in 192 Posts
    Blog Entries
    11
    Rep Power
    164
    Quote Originally Posted by bio View Post
    for q1: How to Add domain accounts to Local Administrators Group using GPO - Richard's myITforum Blog
    for q2 : I allways create logon scripts that maps drives. Its easy to create and placed in the netlogon folder and no GPO needed at all.

    bio..
    Hi Bio,

    Thanks for that. Q1 - Done that but couldn't get it to work for some reason.

    Q2 - Isn't the point of Windows 7 to reduce the need for scripts. But I do take your advice on board and will look at that.

    Gareth

  4. #4

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,260
    Thank Post
    965
    Thanked 324 Times in 192 Posts
    Blog Entries
    11
    Rep Power
    164
    Q1 advice still doesn't seem to work. If I right click on 'Computer' and 'Manage' I am prompted for credentials. I thought this would have gone. When I put in my credentials for a domain admin I get

    'Explorer.exe
    The requested operation requires elevation'.

    Gareth

  5. #5
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,456
    Thank Post
    10
    Thanked 494 Times in 434 Posts
    Rep Power
    113
    Quote Originally Posted by garethedmondson View Post
    I wonder if anyone can help me with a couple of questions:

    1. What is the GPO setting to add Domain Admins to the Local Admin security group? I've set:

    Computer Configuration > Preferences > Control Panel Settings > Local Users and Groups

    I've added 'Domain Admins' to the 'Administrators (built-in_ group'.


    2. The second problem is the mapping of drives. It doesn't seem to be happening. I'm not sure what I'm meant to do. I've set the user policy to pick up with a 'Replace' action. I can access the drives through the normal run command
    1) Domain admins get added to the local admin group automatically when you join the domain.
    2) Does it work as a non local admin? If the drives are mapped when elevated they you may not be able to see them in explorer. Do they show in an elevated command prompt?

  6. #6

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,260
    Thank Post
    965
    Thanked 324 Times in 192 Posts
    Blog Entries
    11
    Rep Power
    164
    Quote Originally Posted by DMcCoy View Post
    1) Domain admins get added to the local admin group automatically when you join the domain.
    2) Does it work as a non local admin? If the drives are mapped when elevated they you may not be able to see them in explorer. Do they show in an elevated command prompt?
    This is really odd - I know Domain Admins is added to the local Administrators group, yet I am still told that explorer.exe needs elevated privelages to work.

    GJE

  7. #7
    bio
    bio is offline
    bio's Avatar
    Join Date
    Apr 2008
    Location
    netherlands
    Posts
    520
    Thank Post
    16
    Thanked 130 Times in 102 Posts
    Rep Power
    37

  8. #8

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,260
    Thank Post
    965
    Thanked 324 Times in 192 Posts
    Blog Entries
    11
    Rep Power
    164
    Quote Originally Posted by bio View Post
    Hi Bio,

    Sorry not replied - our LEA based filtering has gone belly up and nobody can access anything such as Edugeek (Webchat). Anyhow, I've done the above but am still getting the credentials prompt when I try and open 'Manage' after opening the menu on 'Computer' from the Start Menu.

    I can enter the details but am told that I need elevated privs' - it's really weird as I know it should be working. The other GPOs are kicking in (except the drive maps). I'll try it again tomorrow and will recreate the GPO.

    Gareth

  9. #9

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,260
    Thank Post
    965
    Thanked 324 Times in 192 Posts
    Blog Entries
    11
    Rep Power
    164
    Morning,

    Everything seems to be working now with Domain Admin. UAC was the issue and I turned it off.

    The black background issue has been solved with a registry edit but the mapped drives for Admin users is causing me issues.

    I've tried some information found here:

    Group Policy Preference fails to map drive for local admins when UAC is enabled.

    But for some reason I do not have permission to edit this registry key from my domain admin account. I've created the GPO to do it (Computer GPO not user), but it still doesn't catch.

    If it doesn't work then I guess scripting is the only way to map the drives - but I was trying to avoid that.

    Gareth

SHARE:
+ Post New Thread

Similar Threads

  1. Italc: Couple of questions
    By superatticman in forum Network and Classroom Management
    Replies: 33
    Last Post: 9th November 2009, 10:44 AM
  2. Couple of questions
    By button_ripple in forum MIS Systems
    Replies: 8
    Last Post: 1st February 2009, 06:16 PM
  3. Couple of Calendar/Contacts questions
    By LeMarchand in forum Netbooks, PDA and Phones
    Replies: 0
    Last Post: 29th January 2009, 10:00 AM
  4. A Couple Of Sharepoing Questions
    By dagza in forum Virtual Learning Platforms
    Replies: 5
    Last Post: 29th October 2007, 06:42 PM
  5. A couple of Ranger Primary questions.
    By starscream in forum Network and Classroom Management
    Replies: 7
    Last Post: 3rd July 2007, 09:22 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •