RE: How to configure local PC group membership via Group Policy?

Hello,

You can do two things:
1- You can use Restricted Groups thru GPO like Simon wrote
2- You can use startup script thru GPO

If you prefer the first option please read the following articles:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/DepKit/9cc167c8-cf2d-420d-96a1-e00d5aac13f5.mspx
http://support.microsoft.com/kb/835901
http://support.microsoft.com/?kbid=810076

Read the documentation carefully before implement restricted groups!
personally i prefer the second option and you can use a script like that:

'------------------------------------------------------------'

Set wshNetwork = CreateObject("WScript.Network")
ComputerName= wshNetwork.ComputerName

localstr="WinNT://" & Computername

YourGroup="WinNT://YourDomain/YourGroupDomainGroup"

AddToGroup YourGroup, "LocalGroup XP"

function AddToGroup(member, Grpname)

Dim grp1
Set grp1 = Getobject(localstr&"/"& Grpname,group)
grp1.Add (member)

End Function
'------------------------------------------------------------'
Regards


"Shane@smeIT" wrote:

> Does anyone know how to do this?
>
>
> Basically I want to be able to configure local security group membership on
> Windows XP PC's via Group Policy from a Windows 2003 Server.
>
> TIA
>
> --
> Kind Regards
>
>
> Shane
> SME IT Solutions
> Email: mailto:shane@xxxxxxxxxxxx
>
>
>
.

Relevant Pages

  • RE: Assigning a group in AD to be local admin
    ... 1- You can use Restricted Groups thru GPO ... 2- You can use startup script thru GPO ... If you prefer the first option please read the following articles: ...
    (microsoft.public.win2000.group_policy)
  • Re: Migation of computer accounts - ADMT
    ... scope, etc. ... Startup script (non-intrusive, applied via GPO) ... Restricted groups ...
    (microsoft.public.windows.server.active_directory)
  • Re: Want to add users to their local Admin group
    ... > Above assumes adding user to Administrators group on more than one PC. ... > operation on more than on PC, I think we should use GPO here. ... Restricted groups would be great if we could ... PC-1 with user Joe, PC-2 with user Mary, and PC-3 with user Peter. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restricted group functionality
    ... GPO that affects the computer side of things you would have to make sure ... that the computer account objectin question are located in an OU (well, ... we are targeting the administrator group. ... making use of the Restricted Groups can be a bit more difficult than ...
    (microsoft.public.windows.group_policy)
  • RE: adding domain users to power users
    ... Create a GPO that uses restricted groups. ... Using the Group Policy Management ... Windows Settings, Security Settings, Restricted Groups. ... Users) Then open that and add whoever you want to be power users on domain ...
    (microsoft.public.windows.server.active_directory)
Loading