Domain Admins
164
edits
Changes
Jump to navigation
Jump to search
Line 33:
Line 33: − (WIP)+ − + + + + + + + + + + + + + + + + + + − + +
Adding Authorization Controlled Domain Groups (view source)
Revision as of 01:39, 8 May 2017
, 01:39, 8 May 2017→3) Group Policy Steps
=== 3) Group Policy Steps ===
=== 3) Group Policy Steps ===
* Create a new group policy and place it in the OU you originally created
* Create a new group policy and place it in the OU you originally created
* Edit this new group policy
* Edit new group policy with the following selection
** Computer Configuration
*** Policies
**** Windows Settings
***** Security Settings
****** Local Policies / User Rights Assignment
******* (Policy) Allow Log On Locally
******** (Setting) PS1\Domain Admins, PS1\[Authorizer Security Group], PS1\[Authorized Security Group], BUILTIN\Administrators, BUILTIN\Administrators
******* Local Policies / Security Options
******** (Policy) Interactive Logon: Do not require CTRL+ALT+DELETE
*********(Setting) Disabled
******* Restricted Groups
******** (Group) PS1\[Authorizer Group]
********* (Member Of) BUILTIN\Administrators
* LIST CHANGES HERE
** User Configuration
*** NONE