Re: Maling a domain group member of Local Group

Patrick,

Restricted Groups work well, but be careful with these and test before you deploy widely. Remember that these will completely overwrite the local group rather than being additive.

Ryan Hanisco

"Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:eul$YaVHGHA.3916@xxxxxxxxxxxxxxxxxxxx:

You can use a Group Policy "startup" script using the net localgroup
"localgroupname" "domaingroup" \add command in a batch file or use
Restricted Groups. You could make the domain global group the restricted
group and specify the localgroup in "this group is a member of" at the OU
level with a GPO configured with restricted groups and add the computers to
the OU that you want this to happen to.  The link below explains more on
G.  --- Steve

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

"Patrickm" <pmatthews@xxxxxxxxxxx> wrote in message
news:eP0fkhSHGHA.3752@xxxxxxxxxxxxxxxxxxxxxxx

> Is there a way  I can make a Domain global group a member of a PC local
> group with out having to visit every machine?
>


.

Relevant Pages

  • Re: Maling a domain group member of Local Group
    ... > You can use a Group Policy "startup" script using the net localgroup ... You could make the domain global group the restricted ... > group and specify the localgroup in "this group is a member of" at the OU ... > level with a GPO configured with restricted groups and add the computers ...
    (microsoft.public.win2000.security)
  • Re: Maling a domain group member of Local Group
    ... you specify it to me a member of. ... > Restricted Groups work well, but be careful with these and test before you ... You could make the domain global group the restricted ...
    (microsoft.public.win2000.security)
  • Re: Maling a domain group member of Local Group
    ... You could make the domain global group the restricted ... group and specify the localgroup in "this group is a member of" at the OU ... level with a GPO configured with restricted groups and add the computers to ...
    (microsoft.public.win2000.security)
  • Re: Adding local users from domain as local PC admin(?)
    ... the script or Computer Management is a good way to do it. ... 'local group in question' and replace it with 'your group of choice'. ... it is worth) and you do need to make sure that the correct patch is applied ... I also agree that if Restricted Groups is used too much that it is a bad ...
    (microsoft.public.windows.server.active_directory)
  • Re: Adding a Domain Global Security Group to a Local Computer Group
    ... You can put global groups in any local group with ... the "restricted groups" Group Policy setting. ... Here is the GPO path: ...
    (microsoft.public.windows.server.scripting)