Local admins windows server

Question

Is there a Windows policy which enforces that no local users should exist on the server except for sysadmin Unless if a user is a member of an exception group

Answer 1

Yes - it's restricted groups policy setting. Typically it's used for privileged groups, but it should work for Users as well

https://wiki.samba.org/index.php/Managing_local_groups_on_domain_members_via_GPO_restricted_groups

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

Answer 2

Hello

We could try the following group policies.

Computer Configuration> Windows Settings> Security Settings>Local Policies>User rights assignment

Allow logon locally

OR Deny logon locally

Answer 3

Hello

Is your problem solved?

If the above reply is helpful to you, please mark your reply as an answer, thank you very much!

If you have any further questions, please do not hesitate to contact us.

Thanks