+ Post New Thread
Results 1 to 6 of 6
Windows 7 Thread, Automatically add staff to local "Administrator" group? in Technical; Hi, New Windows 7 installation. We used GP [1] to add (AD group) members of "Staff" to the local "Administrator" ...
  1. #1

    Join Date
    Oct 2009
    Posts
    46
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Automatically add staff to local "Administrator" group?

    Hi,

    New Windows 7 installation.

    We used GP[1] to add (AD group) members of "Staff" to the local "Administrator" group. This seemed to work OK (members of "Staff" had local admin rights) but about a month later people started to get stuck logging in at "applying local user and groups policy". I removed this setting in GP and the issue went. Some months later I put it back and the issue returned the next day. At least I'm happy to have narrowed it down!

    How do you give "local admin" access for staff members automatically? Or does the GP setting work for you?

    [1] we put the GPO in an OU containing computers. The setting is under "Computer config, Prefs, Control panel, Local users and groups".

    Thanks

  2. #2

    Join Date
    Mar 2012
    Location
    Manchester
    Posts
    12
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Hi Ramsay,

    Could I just ask why you are giving users local admin access instead of just power users?

    Have you tried assigning the GP to an OU containing users? Also I take it your FRDC is 2008 R2?

    Pete

  3. #3

    Join Date
    Mar 2011
    Location
    Bournemouth
    Posts
    280
    Thank Post
    16
    Thanked 74 Times in 64 Posts
    Rep Power
    22
    Computer settings do not apply on user login, they apply on startup so I would guess there is another setting in the policy or something. Try disabling the user configuration settings on that group policy and see if it still does it.

  4. #4

    Join Date
    Oct 2009
    Posts
    46
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    > Could I just ask why you are giving users local admin access instead of just power users?

    I don't mind what they to do their laptops. If they mess the software up I just re-image it which takes 5 minutes of my time.

    > Have you tried assigning the GP to an OU containing users? Also I take it your FRDC is 2008 R2?

    It should be a computer configuration, as otherwise the user will be a local "Administrator" on any computer they use.

    > Computer settings do not apply on user login, they apply on startup so I would guess there is another setting in the policy or something.
    > Try disabling the user configuration settings on that group policy and see if it still does it.

    That's what I thought, can't imagine why it's causing an issue when they are logging in! It is definitely that setting rather than the GPO as the GPO is still active, I just removed the one specific setting.

  5. #5


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,647
    Thank Post
    229
    Thanked 865 Times in 743 Posts
    Rep Power
    297
    Ist power users discontinued in win7?
    2 ways of doing it iirc gpp preferences in the user section and i cant remember the other atm will look in morning

  6. #6
    Duke5A's Avatar
    Join Date
    Jul 2010
    Posts
    807
    Thank Post
    83
    Thanked 132 Times in 115 Posts
    Blog Entries
    8
    Rep Power
    32
    Your policy should look something like this. The blacked out area under Restricted Groups is just hiding the domain name.

    localadmin.png

SHARE:
+ Post New Thread

Similar Threads

  1. Add an IP address to local host
    By FN-GM in forum Windows
    Replies: 12
    Last Post: 22nd January 2008, 08:29 PM
  2. Do you allow staff to have Local Admin privileges?
    By Ravening_Wolf in forum How do you do....it?
    Replies: 39
    Last Post: 8th March 2007, 12:50 PM
  3. Allowing staff to change kids passwords
    By Simcfc73 in forum How do you do....it?
    Replies: 28
    Last Post: 21st August 2006, 07:55 PM
  4. Allow staff to see a website but block students
    By adamyoung in forum How do you do....it?
    Replies: 9
    Last Post: 7th October 2005, 08:58 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •