Group Policy to change local group settings

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

i would like to add a domain group to the local administrators group of every
workstation on our network. is this possible?

my goal that im trying to accomplish is, to create a new group that has
administrative control over all workstations or some servers, but without
having them in the Domain Administrators group. ive created my new group,
"desktop support", populated this group into "server operators", "print
operators", etc etc, but adding this group to each local admins group, is
something i would like to accomplish via group policy (so i dont have to
visit each workstation).

or, if there is an alternate solution that someone would like to shed light
on for me, i would be greatly appreciative.

thanks,
jonathan

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

On Tue, 11 Jan 2005 12:47:02 -0800, "Jonathan Horne" <Jonathan Horne@discussions.microsoft.com> wrote:

>i would like to add a domain group to the local administrators group of every
>workstation on our network. is this possible?
>
>my goal that im trying to accomplish is, to create a new group that has
>administrative control over all workstations or some servers, but without
>having them in the Domain Administrators group. ive created my new group,
>"desktop support", populated this group into "server operators", "print
>operators", etc etc, but adding this group to each local admins group, is
>something i would like to accomplish via group policy (so i dont have to
>visit each workstation).
>
>or, if there is an alternate solution that someone would like to shed light
>on for me, i would be greatly appreciative.
>
>thanks,
>jonathan

Yes. See tip 5319 in the 'Tips & Tricks' at http://www.jsiinc.com
It uses Group Policy Restricted Groups.


Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com