This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Remove From My Forums

Add computer account to local administrators group

Question
0

Sign in to vote

I can't seem to add a computer account (SCCM 2012 server) to the local administrators group on my SQL Server using group policy. The Restricted Groups are showing up correctly but not the computer account. I'm able to add the computer account manually but not through group policy. Thanks for any assistance.

Thursday, June 6, 2013 7:48 PM

Answers

1

Sign in to vote
Try tying the computer name with a $ at the end of the name e.g. COMPUTERNAME$ ... Restricted Groups are also very "restrictive" I would recommend that your Group Policy Preferences to security the local administrator account as it still removes un-authorised accounts but is a lot more granular ... see my blog post http://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-local-administrator-groups/

Hope it helps
Alan Burchill (MVP)
http://www.grouppolicy.biz

@alanburchill
- Proposed as answer by Alan Burchill Thursday, June 6, 2013 11:27 PM
- Marked as answer by StephenWe Friday, June 7, 2013 12:27 PM
- Unmarked as answer by Andy Qi Friday, June 14, 2013 9:50 AM
- Marked as answer by Andy Qi Friday, June 14, 2013 9:50 AM
Thursday, June 6, 2013 11:27 PM

All replies

1

Sign in to vote
Try tying the computer name with a $ at the end of the name e.g. COMPUTERNAME$ ... Restricted Groups are also very "restrictive" I would recommend that your Group Policy Preferences to security the local administrator account as it still removes un-authorised accounts but is a lot more granular ... see my blog post http://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-local-administrator-groups/

Hope it helps
Alan Burchill (MVP)
http://www.grouppolicy.biz

@alanburchill
- Proposed as answer by Alan Burchill Thursday, June 6, 2013 11:27 PM
- Marked as answer by StephenWe Friday, June 7, 2013 12:27 PM
- Unmarked as answer by Andy Qi Friday, June 14, 2013 9:50 AM
- Marked as answer by Andy Qi Friday, June 14, 2013 9:50 AM
Thursday, June 6, 2013 11:27 PM
0

Sign in to vote

It was the Restricted Groups that prevented the computer account from being added. Thanks

Friday, June 7, 2013 12:27 PM