Re: Restricted Groups Problem

Just create a restricted group for administrators and assign Domain Admins
to the "Members of this group:" setting. When you create the rgroup, on the
add group dialog, just type in administrators. Don't use the Browse button
or else the account could be resolved to a local sid which will cause this
not to work for what you need.

N

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Any opinions or policies stated within are my own and do not necessarily
constitute those of my employer. Use of included script samples are subject
to the terms specified at http://www.microsoft.com/info/cpyright.htm


"exchangerookie1994" <exchangerookie1994@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:6776EA11-EDFB-463A-9E17-1DBFF94D149D@xxxxxxxxxxxxxxxx
>I implememented a GPO and set up restricted groups for Domain Admins, and
> the admistrators group at the domain level. I modified the default domain
> policy. I added administrator and a BackupExec service account to both
> groups under memebers of this group. A few days later I notice everyone
> that used to be admin on their PC no longer has Admin rights and the
> Domain
> Admins group is no longer in the local Administrators group on any of my
> XP
> machines. I have since deleted the restricted groups setting in the
> default
> domain policy. How can I add Domain Admins back in to Local
> administrators
> group on all XP machines as quickly as possible?
>
> Thanks for your Time
>


.