Re: Maling a domain group member of Local Group

You can use a Group Policy "startup" script using the net localgroup
"localgroupname" "domaingroup" \add command in a batch file or use
Restricted Groups. You could make the domain global group the restricted
group and specify the localgroup in "this group is a member of" at the OU
level with a GPO configured with restricted groups and add the computers to
the OU that you want this to happen to. The link below explains more on
G. --- Steve

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

"Patrickm" <pmatthews@xxxxxxxxxxx> wrote in message
news:eP0fkhSHGHA.3752@xxxxxxxxxxxxxxxxxxxxxxx
> Is there a way I can make a Domain global group a member of a PC local
> group with out having to visit every machine?
>


.

Relevant Pages

  • Re: Maling a domain group member of Local Group
    ... you specify it to me a member of. ... > Restricted Groups work well, but be careful with these and test before you ... You could make the domain global group the restricted ...
    (microsoft.public.win2000.security)
  • Re: Maling a domain group member of Local Group
    ... > You can use a Group Policy "startup" script using the net localgroup ... You could make the domain global group the restricted ... > group and specify the localgroup in "this group is a member of" at the OU ... > level with a GPO configured with restricted groups and add the computers ...
    (microsoft.public.win2000.security)
  • Re: Power User Setting Not Saved
    ... included in the Restricted Group via this group is a member of. ... power users along with the specific user you added. ... Restricted Groups to speed up propagation of any changes first run gpupdate ... move it to an Organizational Unit that would not have that Group Policy ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Power User Setting Not Saved
    ... included in the Restricted Group via this group is a member of. ... power users along with the specific user you added. ... Restricted Groups to speed up propagation of any changes first run gpupdate ... move it to an Organizational Unit that would not have that Group Policy ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Power User Setting Not Saved
    ... when I say "local user" I mean the login name that is typically used ... user that is a member of that OU then be a Power User? ... There are two ways to do Restricted Groups - members of this group or this ... membership of the Restricted Group [power users in your case] will be ...
    (microsoft.public.windowsxp.security_admin)