We are wanting to use Restricted GPOs to control Administrators on our servers using the Members, not Member Of, option. Because we want to replace members of the servers with what is in the policy, it always blows away our default local Administrator account. We also do rename our local Administrator account on all servers. When using a Restricted GPO and the members option, is there a way to also include BUILTIN accounts? I have tried adding the renamed BUILTIN\Administrator, but cannot get it to work.
Thanks,
Dan
Dan Heim