Re: Group Manipulation

You could either use a Group Policy "startup" script with the net localgroup
administrators command or use Restricted Groups. If you use Restricted
Groups for the purpose you want to do be sure to configure it at the OU
level and NOT the domain level. The link below explains more. Note there
are two distinct options - members of this group and members of this group .
The members of this group will remove anyone from the group that is not
listed while the members of this group will make sure that the group is in
the group designated and requires that SP4 be installed on W2K computers to
work correctly. --- Steve

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

"test" <test@xxxxxxxx> wrote in message
news:u5sdmEJ4FHA.1596@xxxxxxxxxxxxxxxxxxxxxxx
> Is it possible to use group policy to assign a domain group to be a local
> administrator on all clients that recieved the group policy?
>


.

Relevant Pages

  • Re: remove local admin right in 200 client computer
    ... You could use Group Policy Restricted Groups using "members of this group" ... to enforce membership of the local administrators group. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: SavingMaintaining group members
    ... > It's called restricted groups within group policy. ... >> swear I have seen or read somewhere that you can protect a group such as a ... >> only allows groups to be members and that if you did put a user into the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Manipulation
    ... > localgroup administrators command or use Restricted Groups. ... > at the OU level and NOT the domain level. ... > Note there are two distinct options - members of this group and members of ... >> Is it possible to use group policy to assign a domain group to be a local ...
    (microsoft.public.windows.group_policy)
  • Re: Group Manipulation
    ... Sure you could use Restricted Groups. ... the Group Policy with Restricted Groups as long as you don't mind all those ... users being local administrators on all those computers keeping in mind that ... >> are two distinct options - members of this group and members of this ...
    (microsoft.public.windows.group_policy)
  • RE: Please Help With Using Restricted Groups
    ... I tried one of your suggestions, of adding the DNS suffix. ... a GPO for the OU I am targeting for the restricted groups. ... An additional step I took was to make the group policy users and computers ... > check the DNS settings on the machine and ensure its DNS suffix and DNS ...
    (microsoft.public.win2000.active_directory)