Re: Maling a domain group member of Local Group

It depends how you configure RG as there are two ways. One that does as you
describe and the other that makes sure that the RG is a member of the group
you specify in which case it will not replace membership in the local group
you specify it to me a member of. Testing and backing up first is always
good advice. --- Steve



"Ryan Hanisco" <rhanisco@xxxxxxxxxxxxxx> wrote in message
news:%23%23HlkqPJGHA.1424@xxxxxxxxxxxxxxxxxxxxxxx
> Patrick,
>
> Restricted Groups work well, but be careful with these and test before you
> deploy widely. Remember that these will completely overwrite the local
> group rather than being additive.
>
> Ryan Hanisco
>
> "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:eul$YaVHGHA.3916@xxxxxxxxxxxxxxxxxxxx:
>
>> You can use a Group Policy "startup" script using the net localgroup
>> "localgroupname" "domaingroup" \add command in a batch file or use
>> Restricted Groups. You could make the domain global group the restricted
>> group and specify the localgroup in "this group is a member of" at the OU
>> level with a GPO configured with restricted groups and add the computers
>> to
>> the OU that you want this to happen to. The link below explains more on
>> G. --- Steve
>>
>> http://www.windowsecurity.com/articles/Using-Restricted-Groups.html
>>
>> "Patrickm" <pmatthews@xxxxxxxxxxx> wrote in message
>> news:eP0fkhSHGHA.3752@xxxxxxxxxxxxxxxxxxxxxxx
>>
>> > Is there a way I can make a Domain global group a member of a PC local
>> > group with out having to visit every machine?
>> >
>


.

Relevant Pages

  • Re: Maling a domain group member of Local Group
    ... You could make the domain global group the restricted ... group and specify the localgroup in "this group is a member of" at the OU ... level with a GPO configured with restricted groups and add the computers to ...
    (microsoft.public.win2000.security)
  • Re: Maling a domain group member of Local Group
    ... > You can use a Group Policy "startup" script using the net localgroup ... You could make the domain global group the restricted ... > group and specify the localgroup in "this group is a member of" at the OU ... > level with a GPO configured with restricted groups and add the computers ...
    (microsoft.public.win2000.security)
  • Re: Restricted Groups problem !!!
    ... specify that "Domain Global Group" is a member of "Specified Local ... Group" using the Member Of functionality of the Restricted Groups ...
    (microsoft.public.win2000.active_directory)
  • Re: Power User Setting Not Saved
    ... included in the Restricted Group via this group is a member of. ... power users along with the specific user you added. ... Restricted Groups to speed up propagation of any changes first run gpupdate ... move it to an Organizational Unit that would not have that Group Policy ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Power User Setting Not Saved
    ... included in the Restricted Group via this group is a member of. ... power users along with the specific user you added. ... Restricted Groups to speed up propagation of any changes first run gpupdate ... move it to an Organizational Unit that would not have that Group Policy ...
    (microsoft.public.windowsxp.security_admin)