Local Administrator

[Wubbalubbadub]

Afternoon,

 

I have recently started a new post at a school and I am having some trouble.

 

Currently all staff have local administrator on there laptops so they can install whatever.

 

So I have created a new group policy to resolve this.

 

I have done the following;

 

Computer configuration - preferences - control panel settings - Local users and groups

 

I have then got 3 actions in there in the following order

 

1. Action: Update - Delete all member users (Ticked) - Members: DOMAINNAME\Domain Admins, BUILTIN\Administrator, BUILTIN\ISD

2. Action: Update - Administrator password

3. Action: Update - ISD password

 

Action 2 & 3 are applying and working fine. However action 1 no matter what I seem to do doesn't work.

 

All I need is every member of the local administrators group to be deleted which it is already doing. And to then re-add Domain admins, local administrator & the local ISD account.

 

However it just isn't adding.

 

Any help would be great if you could help.

[computer_expert]

2. Action: Update - Administrator password

 

Not sure if you have seen this or not - MS14-025: An Update for Group Policy Preferences - Security Research & Defense - Site Home - TechNet Blogs

[Dos_Box]

Moving to correct forum.

Given you haven't listed what Server OS you are using I'll put it in Server 2008 R2.