I have windows 2008R2. I create a GPO for local adminitrator. So that every domain user I add there , they are also local administrator on the PC. Now I'd like to do the same but with more restrict operation, I creare another GPO and add these as member:

  • BackupOperators
  • Network configuration Operators

But once I log in I'm not able to perform backup or change IP . Please advice.


You're asking for a TON of trouble by granting users those 3 roles. It would be less risky if you were to simply create a scheduled task that runs a backup on each machine. You can use Group Policy to create and deploy that scheduled task to each of them.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.