Re: restricted groups frustration!

It sounds like you're doing everything correct. I would just make sure that
when you are in restricted groups, be sure to use the object picker to find
the group you want added to the administrators group. Typing
'Administrators' in the second part should work fine. If you perform a
gpupdate (no /force or reboot is required), you'll see the changes
immediately (if the dc that provided logon has the latest version of the gpo
you're working with).

Note: If you're putting this in the default domain policy, it will also
apply to domain controllers. If this is not the desired RSOP, you'll most
likely want to create a new gpo with these settings in it and security
filter it to 'Domain Computers', which avoids domain controllers.

Tim

"Phillip Drummond" <w@xxxxx> wrote in message
news:uY9DDJPBIHA.1212@xxxxxxxxxxxxxxxxxxxxxxx
why doesnt this simply work??
i am trying to add an AD group to the local administrators group on all
domain servers. i am using the default domain policy, computer
configuration, windows settings, security settings, restricted groups.

i create a new group in here using the group that i want added to local
admins and then configure the second box "this group is a member of"
option. in here i am typing "Administrators".

24 hours has gone by. shouldnt i be able to log on to ANY domain machine
and see this group in the local admins group? because i dont. can someone
please tell me what the problem is?




.

Relevant Pages

  • Re: Administering OUs
    ... IF You set this settings in ... >GPO on the OU level and then define in this GPO that in ... DOmain Admins can be a member of local administrators group ... restricted groups are proper solution for this problem. ...
    (microsoft.public.win2000.active_directory)
  • Re: restricted groups for local admin rights
    ... I'm referring to local administrators and not domain administrators?) ... > describe you want to use the "member of" option for restricted groups. ... > way you can add a global group to the administrators group without affecting ...
    (microsoft.public.windows.group_policy)
  • RE: Removing local users from local administrator group
    ... Create an OU including all user accounts you want to move from local ... administrators group. ... Apply Restricted Groups group policy to this OU. ...
    (microsoft.public.win2000.group_policy)
  • Re: Dmin group member ship keeps disappearing.
    ... You either have Restricted Groups enabled in the domain or are using a Group ... Policy shutdown script to manage membership of the administrators group. ... > couple of computers and adding admins to the local admin account. ... > fine for the local user I added ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Local Printer Access
    ... > You can force a user into a local group via group policy using restricted ... > Restricted Groups Policy Settings ... > Members and Member Of. ... > Stand-Alone Server Default Settings ...
    (microsoft.public.windows.server.active_directory)
Loading