Re: Restricted Groups problem !!!

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Scott Lowe (me_at_privacy.net)
Date: 08/02/04 

Date: Mon, 2 Aug 2004 15:54:17 -0400

On 2004-04-28 10:18:12 -0400, "Matjaz Ladava [MVP]"
<matjaz@_nospam_ladava.com> said:

> Cary you are probably referring to this
> http://support.microsoft.com/default.aspx?kbid=810076

Unless I am reading the article incorrectly, this fix allows you to
specify that "Domain Global Group" is a member of "Specified Local
Group" using the Member Of functionality of the Restricted Groups
policy for the "Domain Global Group". Is this the only way to simply
specify that, in addition to whatever other accounts are currently
members, this global group should also be a member?

In other words, I don't want the Members property of a Restricted
Groups setting to remove accounts that aren't explicitly listed in the
policy. Make sense? 

-- 
Scott Lowe

Relevant Pages

  • Re: Adding users to a Security Group based on AD Description field
    ... newly created Global Group with users. ... on, is why I can run the script, everything works perfectly and I get ... NameTranslate object to convert this to the DN of the user. ... if not already a member. ...
    (microsoft.public.scripting.vbscript)
  • Re: Restricted Groups problem
    ... member servers in "sub.domain" via group policy. ... administrators group. ... Are you trying to add a global group to a global group? ... On member servers in the web servers OU of sub.domain, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Power user group
    ... I think the answer is in the article 'How to configure a global group to be ... a member of the administrators group on all workstations. ... > torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windowsxp.security_admin)
  • Re: NetUserGetGroups() omitting groups
    ... It appears, after some tracing and screen shots, that the user ... MSDN suggest that it can happen even if the API returns no error. ... The group omitted is a global group, itself member of another global ...
    (microsoft.public.win32.programmer.networks)
  • Re: Restricted Groups problem
    ... the group type is a global group from "domain". ... "member of" works, coul you elaborate a little more? ... As for not changing the local administrators group, ... On member servers in the web servers OU of sub.domain, ...
    (microsoft.public.windows.server.active_directory)