Automatically Adding Domain Groups into Local Administrators group
As we all know whenever we add a computer to a Domain, the domain admin group is added to the local computers administrators group by default. Now as I wanted to add my IT support group automatically to the local computers administrators group, I would like to know whether there is any way to do this before and/or after joining a computer to a domain? I want to do this without manually touching each and every computer to do a manual add? If it’s possible, please let me know how?
Re: Automatically Adding Domain Groups into Local Administrators group
I think it should be possible using restricted groups with a GPO. Furthermore if you use the MEMBERS option then you are indirectly forcing which groups/accounts are member of the group. Note that that with MEMBEROF option, everything else will be kicked because you are NOT enforcing which groups/accounts are member of the group.
Better checkout the following articles for more helps. http://technet2.microsoft.com/window....mspx?mfr=true
http://support.microsoft.com/kb/279301
Re: Automatically Adding Domain Groups into Local Administrators group
Hello Charles,
Use Restricted Groups for this, see here for detailed how to: http://www.frickelsoft.net/blog/?p=13
Best regards
Re: Automatically Adding Domain Groups into Local Administrators group
You can use Member Of settings rather then Members settings to add members to the local administrators with RGP without removing the existing members. By doing so, it will not touch the existing groups and will a new group of those local groups .
