Re: Group Manipulation

Tech-Archive recommends: Fix windows errors by optimizing your registry

Great, Thank you very much! I've heard of the Restricted Groups, but never
knew exactly how to use it. Great article also. Thanks again.

"Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx> wrote in message
news:e4hR6jJ4FHA.3036@xxxxxxxxxxxxxxxxxxxxxxx
> You could either use a Group Policy "startup" script with the net
> localgroup administrators command or use Restricted Groups. If you use
> Restricted Groups for the purpose you want to do be sure to configure it
> at the OU level and NOT the domain level. The link below explains more.
> Note there are two distinct options - members of this group and members of
> this group . The members of this group will remove anyone from the group
> that is not listed while the members of this group will make sure that the
> group is in the group designated and requires that SP4 be installed on W2K
> computers to work correctly. --- Steve
>
> http://www.windowsecurity.com/articles/Using-Restricted-Groups.html
>
> "test" <test@xxxxxxxx> wrote in message
> news:u5sdmEJ4FHA.1596@xxxxxxxxxxxxxxxxxxxxxxx
>> Is it possible to use group policy to assign a domain group to be a local
>> administrator on all clients that recieved the group policy?
>>
>
>


.

Relevant Pages

  • Re: remove local admin right in 200 client computer
    ... You could use Group Policy Restricted Groups using "members of this group" ... to enforce membership of the local administrators group. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group Manipulation
    ... You could either use a Group Policy "startup" script with the net localgroup ... administrators command or use Restricted Groups. ... are two distinct options - members of this group and members of this group. ...
    (microsoft.public.windows.group_policy)
  • RE: SavingMaintaining group members
    ... > It's called restricted groups within group policy. ... >> swear I have seen or read somewhere that you can protect a group such as a ... >> only allows groups to be members and that if you did put a user into the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restricted Groups GPO
    ... The startup script could add the required groups to the local admin group on ... I've only used it to stipulate> what domain groups are members or what local groups - I didn't care that> nobody else could be a member;-) ... > I need to use the Restricted Groups policy setting to enforce> membership in the local Administrators group on member servers and> workstations by certain global groups ...
    (microsoft.public.windows.server.active_directory)
  • Re: Give user Admin rights to all PCs?
    ... With care you can use the GPO Restricted Groups to do this. ... CompAdmins) you create to be a member of Adminstrators ... restricted group for CompAdmins and use the Members ...
    (microsoft.public.windows.server.active_directory)