Архив

Posts Tagged ‘Microsoft’

How To Force Adding Of Domain Admin Group to Local Admin Group

How To Force Adding Of Domain Admin Group to Local Admin Group
Introduction:

A common problem in Windows domain management is the removing of Domain Admin group from Local Admin group by users. This operation prevent from the Domain Admin group to connect to Administrative shares (like c$), log on to user workstation/server, track on user activity and so on.
Using «Restrict Groups» option from Windows 2000/2003 GPO impose some solution for this problem, but if there local users on the workstation/server, this option inefficient, and may harm the workstation/server users.

Machine Script Solution:

By combine Windows 2000/2003 GPO and creating a machine script, we can get
A good Solution to this problem, and by avoiding the problems that «Restrict Groups» option from Windows 2000/2003 GPO create.

The script structure:

Script Name: Machine_Startup_Script.vbs (You can use any name that you like,
But you need to verify that the file name suffix end with
*.vbs).

Operation Interval: Each machine startup or/and shutdown.

‘Beginning Of the Script

On Error Resume Next

‘get main objects/variables
Set ws = WScript.CreateObject ( «WScript.Shell» )
compname = ws.ExpandEnvironmentStrings ( «%COMPUTERNAME%» )
Set adGrp = GetObject ( «WinNT://» & compname & «/Administrators,group» )

‘add domain groups to local admin group
adGrp.Add ( «WinNT://mywindowsdomain/Domain Admins,group» )

‘End of the Script

mywindowsdomain = The NetBIOS name of the Domain that the user workstation log into.

Sentence that begin with » ‘ » use for a comment only.

After creating the script, we need add this script to Domain Default GPO – as
Computer startup or/and shutdown script and we done.

Reference:

Script Center
http://www.microsoft.com/technet/community/scriptcenter/default.mspx

Windows 2000 Computer Startup Scripts:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/optimize/startw2k.asp?frame=true

Active Directory Services and Group Policy in Windows Server 2003:
http://www.microsoft.com/israel/events/downloads/ws2003event/Active_Directory.ppt

Windows 2000 Group Policy:
http://www.microsoft.com/windows2000/techinfo/howitworks/management/grouppolwp.asp

Windows Essential Business Server 2008

Стала доступна Public Preview версия Windows Essential Business Server 2008. Я давно ждал этого продукта, поскольку для многих организаций ограничение на количество пользователей для Small Business Server делают невозможным его использование.

Windows_Essential_Server

Windows Essential Business Server 2008 is designed for the needs of midsize organizations with up to 250 desktops, helping IT professionals take control of their systems, reduce time spent “fighting fires” and focus more on strategic efforts to drive business growth. The solution includes built-in IT best practices and provides a unified console for management of key workloads and product licensing, which makes IT budgeting and purchase simpler and more predictable.

Windows Essential Business Server combines the technologies of Windows Server 2008, Exchange Server 2007, Forefront Security for Exchange Server, System Center Essentials 2007, the next version of Internet Security and Acceleration Server and, in the Premium Edition, SQL Server 2008 technology. The product will be demonstrated on IBM BladeCenter S and HP BladeSystem c-Class c3000 hardware at the “Heroes Happen Here” launch on Feb. 27 in Los Angeles, and is slated for availability in the second half of 2008.

Значительно изменился состав поставляемых в комплекте продуктов, а, соответственно, и цена:

· Windows Essential Business Server 2008 Standard Edition software, including five CALs, $5,472 (U.S.); additional CALs $81 each (U.S.)

· Windows Essential Business Server 2008 Premium Edition software, including five CALs, $7,163 (U.S.); additional CALs $195 each (U.S.)

Дороговато, хотя и в комплекте идет немало.