+ Post New Thread
Results 1 to 6 of 6
Windows Server 2008 R2 Thread, Administrator GPO? in Technical; Hi All, Bit of a nooby question here, but what the heck we're all friends right? I have a (very) ...
  1. #1
    Koldov's Avatar
    Join Date
    May 2011
    Location
    Bedfordshire
    Posts
    505
    Thank Post
    101
    Thanked 50 Times in 46 Posts
    Rep Power
    39

    Administrator GPO?

    Hi All,

    Bit of a nooby question here, but what the heck we're all friends right?

    I have a (very) basic grasp of AD and GPO's but I'm just throwing this out there to save my brain....

    In AD you have your USERS and COMPUTERS, right? This is somewhat mirrored by the structure of the our GPO management screen (as in when I add an OU in AD then it shows up in the GPO screen)...

    The standard 'BUILT-IN', 'COMPUTERS' and 'USERS' OU's do not however appear there by default. I only ask because I signed on to the server as 'THE' administrator yesterday and realised a particular (IE homepage) GPO had not applied. After some digging in AD I realised that 'THE' administrator account does not actually reside in an our OU named ADMINISTRATORS, because that shows in AD and has the GPO applied. It actually sits in the default USERS OU which only has the Default Domain Policy applied as it does not appear in the GPO management screen to apply any other GPO's to it.

    So my questions (and I do know I should not be loggin-on as 'THE' administrator....

    Can I just drag and drop 'THE' administrator account from the default 'USERS' OU to our administrators OU, to have our administrator policy apply to it?

    Is the account in the default USERS OU because you are not supposed to do this or log-on with it, or 'muck about' with it as applying GPO's incorrectly may cause other issues or lock it out?

    Kol.

  2. #2

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,631
    Thank Post
    514
    Thanked 2,442 Times in 1,890 Posts
    Blog Entries
    24
    Rep Power
    831
    It is highly inadvisable to move the default domain admin account - as it means you can break things. Realistically, you shouldn't use it at all for day to day stuff either.

  3. #3

    sparkeh's Avatar
    Join Date
    May 2007
    Posts
    6,731
    Thank Post
    1,272
    Thanked 1,644 Times in 1,100 Posts
    Blog Entries
    22
    Rep Power
    505
    My advice is to leave well alone.
    Create a new domain admin account and plonk it in whatever OU you like and use that account.

  4. #4
    Koldov's Avatar
    Join Date
    May 2011
    Location
    Bedfordshire
    Posts
    505
    Thank Post
    101
    Thanked 50 Times in 46 Posts
    Rep Power
    39
    Quote Originally Posted by localzuk View Post
    Realistically, you shouldn't use it at all for day to day stuff either.
    I have read that numerous times, but I just can't bring myself to change for some reason (like I might break something if I don't sign on as the administrator)...

    This is how I was shown to log-on to the server when I started a couple of years back, it's what the previous tech did and what the senior tech that was training me did...

    Kol.

  5. #5
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,136
    Thank Post
    47
    Thanked 146 Times in 128 Posts
    Rep Power
    45
    I 'copied' the admin account and used my own credentials then moved it to its own OU. the Administrator account is locked in a safe, never used but for emergencies (I forget my password) :P

  6. #6


    Join Date
    Sep 2008
    Posts
    1,752
    Thank Post
    320
    Thanked 258 Times in 211 Posts
    Rep Power
    119
    As others have said, create a new admin account. And if you are a bit nervous about moving/dragging accounts from 1 OU to another, you can right click and select "move" to move the object into another OU. It allows you to select the OU and can cut down the opportunity to accidentally drag the object into the wrong OU.

SHARE:
+ Post New Thread

Similar Threads

  1. Install flash via GPO, needs administrative privelages
    By Davit2005 in forum Windows Server 2008 R2
    Replies: 7
    Last Post: 25th November 2011, 08:50 AM
  2. Replies: 38
    Last Post: 26th November 2010, 03:42 PM
  3. Deploy Software via GPO
    By ICTNUT in forum How do you do....it?
    Replies: 16
    Last Post: 4th July 2006, 04:09 PM
  4. Replies: 11
    Last Post: 27th September 2005, 12:30 AM
  5. The Ultimate Administrators Toolbox
    By ICTNUT in forum Scripts
    Replies: 7
    Last Post: 15th August 2005, 11:38 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •