Windows 7 Thread, A couple of questions.... in Technical; I wonder if anyone can help me with a couple of questions:
1. What is the GPO setting to add ...
23rd June 2010, 03:04 PM #1
A couple of questions....
I wonder if anyone can help me with a couple of questions:
1. What is the GPO setting to add Domain Admins to the Local Admin security group? I've set:
Computer Configuration > Preferences > Control Panel Settings > Local Users and Groups
I've added 'Domain Admins' to the 'Administrators (built-in_ group'.
2. The second problem is the mapping of drives. It doesn't seem to be happening. I'm not sure what I'm meant to do. I've set the user policy to pick up with a 'Replace' action. I can access the drives through the normal run command
23rd June 2010, 03:55 PM #2
for q1: How to Add domain accounts to Local Administrators Group using GPO - Richard's myITforum Blog
for q2 : I allways create logon scripts that maps drives. Its easy to create and placed in the netlogon folder and no GPO needed at all.
23rd June 2010, 04:10 PM #3
Originally Posted by bio
Thanks for that. Q1 - Done that but couldn't get it to work for some reason.
Q2 - Isn't the point of Windows 7 to reduce the need for scripts. But I do take your advice on board and will look at that.
23rd June 2010, 04:15 PM #4
Q1 advice still doesn't seem to work. If I right click on 'Computer' and 'Manage' I am prompted for credentials. I thought this would have gone. When I put in my credentials for a domain admin I get
The requested operation requires elevation'.
23rd June 2010, 04:22 PM #5
1) Domain admins get added to the local admin group automatically when you join the domain.
Originally Posted by garethedmondson
2) Does it work as a non local admin? If the drives are mapped when elevated they you may not be able to see them in explorer. Do they show in an elevated command prompt?
23rd June 2010, 09:02 PM #6
This is really odd - I know Domain Admins is added to the local Administrators group, yet I am still told that explorer.exe needs elevated privelages to work.
Originally Posted by DMcCoy
24th June 2010, 08:28 AM #7
24th June 2010, 06:25 PM #8
Originally Posted by bio
Sorry not replied - our LEA based filtering has gone belly up and nobody can access anything such as Edugeek (Webchat). Anyhow, I've done the above but am still getting the credentials prompt when I try and open 'Manage' after opening the menu on 'Computer' from the Start Menu.
I can enter the details but am told that I need elevated privs' - it's really weird as I know it should be working. The other GPOs are kicking in (except the drive maps). I'll try it again tomorrow and will recreate the GPO.
28th June 2010, 12:18 PM #9
Everything seems to be working now with Domain Admin. UAC was the issue and I turned it off.
The black background issue has been solved with a registry edit but the mapped drives for Admin users is causing me issues.
I've tried some information found here:
Group Policy Preference fails to map drive for local admins when UAC is enabled.
But for some reason I do not have permission to edit this registry key from my domain admin account. I've created the GPO to do it (Computer GPO not user), but it still doesn't catch.
If it doesn't work then I guess scripting is the only way to map the drives - but I was trying to avoid that.
By superatticman in forum Network and Classroom Management
Last Post: 9th November 2009, 11:44 AM
By button_ripple in forum MIS Systems
Last Post: 1st February 2009, 07:16 PM
By LeMarchand in forum Netbooks, PDA and Phones
Last Post: 29th January 2009, 11:00 AM
By dagza in forum Virtual Learning Platforms
Last Post: 29th October 2007, 07:42 PM
By starscream in forum Network and Classroom Management
Last Post: 3rd July 2007, 10:22 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)