local vista admin 2008

Hello,

we want to make every domainuser a local admin on the vista machine's.

It works fine for XP with the "restricted groups'"
But it doenst seem to work for vista that way.

Any suggestions?
Tx

N.

Hello nico,

Why will you do this? Against any security advises, domain users never should
be local admin.

Restrcited groups works also in 2008, you can also use Group policy preferences,
Control panel settings, Local users and groups. For GPP you have to install
Client side extensions:
CSE Vista 32bit:
http://www.microsoft.com/downloads/d...displaylang=en

CSE Vista 64bit:
http://www.microsoft.com/downloads/d...displaylang=en


Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> we want to make every domainuser a local admin on the vista machine's.
>
> It works fine for XP with the "restricted groups'" But it doenst seem
> to work for vista that way.
>
> Any suggestions?
> Tx
> N.
>

M.,

I know bout the security advise, but this is a school enviroment for adults
and they have to be admins to install software and blablabla.......

tx for the input, although I can't follow it all.

I'm running a 2008server
I added a group as administrator in the restricted group. Then I added all
the users in that group that need to be local admins.
For Xp that run's fine

For vista the users are for some reason not local admins.
Where can I configure these settings in "Group policy preferences" or some
other way?

Tx for the info.

regards,
N.


"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> schreef in bericht
news:. com...
> Hello nico,
>
> Why will you do this? Against any security advises, domain users never
> should be local admin.
>
> Restrcited groups works also in 2008, you can also use Group policy
> preferences, Control panel settings, Local users and groups. For GPP you
> have to install Client side extensions:
> CSE Vista 32bit:
> http://www.microsoft.com/downloads/d...displaylang=en
>
> CSE Vista 64bit:
> http://www.microsoft.com/downloads/d...displaylang=en
>
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hello,
>>
>> we want to make every domainuser a local admin on the vista machine's.
>>
>> It works fine for XP with the "restricted groups'" But it doenst seem
>> to work for vista that way.
>>
>> Any suggestions?
>> Tx
>> N.
>>
>
>

Hello nico,

In Group policy preferences, Control panel settings, Local users and groups,
rightclick and choose, new group, update and select administrators, here
add the security groups which should become local admin.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> M.,
>
> I know bout the security advise, but this is a school enviroment for
> adults and they have to be admins to install software and
> blablabla.......
>
> tx for the input, although I can't follow it all.
>
> I'm running a 2008server
> I added a group as administrator in the restricted group. Then I added
> all
> the users in that group that need to be local admins.
> For Xp that run's fine
> For vista the users are for some reason not local admins.
> Where can I configure these settings in "Group policy preferences" or
> some
> other way?
> Tx for the info.
>
> regards,
> N.
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> schreef in bericht
> news:. com...
>
>> Hello nico,
>>
>> Why will you do this? Against any security advises, domain users
>> never should be local admin.
>>
>> Restrcited groups works also in 2008, you can also use Group policy
>>
>> preferences, Control panel settings, Local users and groups. For GPP
>> you
>>
>> have to install Client side extensions:
>>
>> CSE Vista 32bit:
>>
>> http://www.microsoft.com/downloads/d...D=ab60dc87-884
>> c-46d5-82cd-f3c299dac7cc&displaylang=en
>>
>> CSE Vista 64bit:
>> http://www.microsoft.com/downloads/d...d=B10A7AF4-8BE
>> E-4ADC-8BBE-9949DF77A3CF&displaylang=en
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hello,
>>>
>>> we want to make every domainuser a local admin on the vista
>>> machine's.
>>>
>>> It works fine for XP with the "restricted groups'" But it doenst
>>> seem to work for vista that way.
>>>
>>> Any suggestions?
>>> Tx
>>> N

works for me
thank you

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> schreef in bericht
news:. com...
> Hello nico,
>
> In Group policy preferences, Control panel settings, Local users and
> groups, rightclick and choose, new group, update and select
> administrators, here add the security groups which should become local
> admin.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> M.,
>>
>> I know bout the security advise, but this is a school enviroment for
>> adults and they have to be admins to install software and
>> blablabla.......
>>
>> tx for the input, although I can't follow it all.
>>
>> I'm running a 2008server
>> I added a group as administrator in the restricted group. Then I added
>> all
>> the users in that group that need to be local admins.
>> For Xp that run's fine
>> For vista the users are for some reason not local admins.
>> Where can I configure these settings in "Group policy preferences" or
>> some
>> other way?
>> Tx for the info.
>>
>> regards,
>> N.
>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> schreef in bericht
>> news:. com...
>>
>>> Hello nico,
>>>
>>> Why will you do this? Against any security advises, domain users
>>> never should be local admin.
>>>
>>> Restrcited groups works also in 2008, you can also use Group policy
>>>
>>> preferences, Control panel settings, Local users and groups. For GPP
>>> you
>>>
>>> have to install Client side extensions:
>>>
>>> CSE Vista 32bit:
>>>
>>> http://www.microsoft.com/downloads/d...D=ab60dc87-884
>>> c-46d5-82cd-f3c299dac7cc&displaylang=en
>>>
>>> CSE Vista 64bit:
>>> http://www.microsoft.com/downloads/d...d=B10A7AF4-8BE
>>> E-4ADC-8BBE-9949DF77A3CF&displaylang=en
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> Hello,
>>>>
>>>> we want to make every domainuser a local admin on the vista
>>>> machine's.
>>>>
>>>> It works fine for XP with the "restricted groups'" But it doenst
>>>> seem to work for vista that way.
>>>>
>>>> Any suggestions?
>>>> Tx
>>>> N.
>
>

Hello nico,

You're welcome.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> works for me
> thank you
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> schreef in bericht
> news:. com...
>
>> Hello nico,
>>
>> In Group policy preferences, Control panel settings, Local users and
>> groups, rightclick and choose, new group, update and select
>> administrators, here add the security groups which should become
>> local admin.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> M.,
>>>
>>> I know bout the security advise, but this is a school enviroment for
>>> adults and they have to be admins to install software and
>>> blablabla.......
>>>
>>> tx for the input, although I can't follow it all.
>>>
>>> I'm running a 2008server
>>> I added a group as administrator in the restricted group. Then I
>>> added
>>> all
>>> the users in that group that need to be local admins.
>>> For Xp that run's fine
>>> For vista the users are for some reason not local admins.
>>> Where can I configure these settings in "Group policy preferences"
>>> or
>>> some
>>> other way?
>>> Tx for the info.
>>> regards,
>>> N.
>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> schreef in bericht
>>> news:. com...
>>>> Hello nico,
>>>>
>>>> Why will you do this? Against any security advises, domain users
>>>> never should be local admin.
>>>>
>>>> Restrcited groups works also in 2008, you can also use Group policy
>>>>
>>>> preferences, Control panel settings, Local users and groups. For
>>>> GPP you
>>>>
>>>> have to install Client side extensions:
>>>>
>>>> CSE Vista 32bit:
>>>>
>>>> http://www.microsoft.com/downloads/d...yID=ab60dc87-8
>>>> 84 c-46d5-82cd-f3c299dac7cc&displaylang=en
>>>>
>>>> CSE Vista 64bit:
>>>> http://www.microsoft.com/downloads/d...yid=B10A7AF4-8
>>>> BE
>>>> E-4ADC-8BBE-9949DF77A3CF&displaylang=en
>>>> Best regards
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> Hello,
>>>>>
>>>>> we want to make every domainuser a local admin on the vista
>>>>> machine's.
>>>>>
>>>>> It works fine for XP with the "restricted groups'" But it doenst
>>>>> seem to work for vista that way.
>>>>>
>>>>> Any suggestions?
>>>>> Tx
>>>>> N