Administrative rights

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I have added in all the 2nd line supporters in my company to a
security group called Helpdesk.
In GP I have added in the helpdesk group to the administrators group
within restricted groups in a workstations OU where all the computer
accounts are held.
The group gets added in to the administrators group ok, and most
functions are available, but there are some programs ( such as windows
updates) that wont run due to no permissions. Logging in as the local
admin doesn't work either. Only If I log in as myself (Enterprise
admin) will it work. Any ideas what I have done wrong?

Thanks for any help

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Using restricted groups can remove all other users/groups from the local
administrators group [other that built in administrator I believe]. If not doing such
already, make sure that the group you created is a domain global group for your
helpdesk and also include domain admins and administrator in the restricted groups
entry for administrators for that OU. --- Steve


"Andymackk" <google@andymackk.co.uk> wrote in message
news:f89f7cd0.0408090334.4528f2c8@posting.google.com...
> I have added in all the 2nd line supporters in my company to a
> security group called Helpdesk.
> In GP I have added in the helpdesk group to the administrators group
> within restricted groups in a workstations OU where all the computer
> accounts are held.
> The group gets added in to the administrators group ok, and most
> functions are available, but there are some programs ( such as windows
> updates) that wont run due to no permissions. Logging in as the local
> admin doesn't work either. Only If I log in as myself (Enterprise
> admin) will it work. Any ideas what I have done wrong?
>
> Thanks for any help