Add Domain users to local administrators via GPO

preview_player
Показать описание

Add Domain users to local administrators via GPO

1. Prepare

- DC22 : Domain Member

2. Step by step : Add Domain users to local administrators via GPO

- DC21 : Add HiepIT account to local administrators via GPO

+ Server manager - Tools - Group Policy Management - Right-click "Default Domain policy" : Edit - Computer Configuration

- Polices - Windows Setting - Security Settings - Right-click "Restricted Groups" - Add Group... - Administrators :

+ Members of this group - Add... - Browse... - HiepIT;Domain admins - OK

+ Start - cmd - gpupdate /force

- DC22 : Check again

+ Start - cmd - gpupdate /force

+ Server Manager - Tools - Computer Management - Local Users and Groups - Groups - Double-click Administrators

=== HiepIT is member local administrators === OK
Рекомендации по теме
Комментарии
Автор

- Polices - Windows Setting - Security Settings - Right-click "Restricted Groups" - Add Group... - Administrators
Administrators is the local group in computers, not a simple label, so you can't use a name as a label, it's indicate a specific existent group

AnteaChannel
Автор

You are adding the domain users to a domain administrator group not to a local administrators group

TheAmazeer