Group Policy to change local group settings

Archived from groups: microsoft.public.win2000.group_policy (More info?)

On Tue, 11 Jan 2005 12:47:02 -0800, "Jonathan Horne" <Jonathan Horne@discussions.microsoft.com> wrote:

>i would like to add a domain group to the local administrators group of every
>workstation on our network. is this possible?
>
>my goal that im trying to accomplish is, to create a new group that has
>administrative control over all workstations or some servers, but without
>having them in the Domain Administrators group. ive created my new group,
>"desktop support", populated this group into "server operators", "print
>operators", etc etc, but adding this group to each local admins group, is
>something i would like to accomplish via group policy (so i dont have to
>visit each workstation).
>
>or, if there is an alternate solution that someone would like to shed light
>on for me, i would be greatly appreciative.
>
>thanks,
>jonathan

Yes. See tip 5319 in the 'Tips & Tricks' at http://www.jsiinc.com
It uses Group Policy Restricted Groups.


Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com