Domain Users into Local Admins

From: Ben (bjblackmore_at_xyz.hotmail.com)
Date: 04/22/05 

Date: Fri, 22 Apr 2005 11:35:14 +0100

Hi,

I'm trying to add a domain group, containing our mobile users, into the
local admins group. I'm using the Restricted Groups feature of group policy
for this.

So far I've created a new group called Administrators, and added the global
security group 'Laptop Admins'. However when I reboot the machine and login
the changes haven't taken place.

I've set this at domian level, and OU level, and neither has worked. Does
the group need to be domain local? Am I adding it at the wrong level?

Any help would be much appreciated!

Ben

P.S. We're running Windows 2003 server SP1, and XP Pro SP2

Relevant Pages

  • Re: Add domain user to local group script troubleshoot
    ... it works great when I'm already a member of the ... and thus my Computers OU underneath, but am not a domain admin and so am not ... by default in the local admins group of each computer. ... practice would be to add a domain group to the local Administrators group on ...
    (microsoft.public.windows.server.scripting)
  • Re: Domain Users into Local Admins
    ... Bruce Sanderson MVP Printing ... It is perfectly useless to know the right answer to the wrong question. ... > I'm trying to add a domain group, containing our mobile users, into the ... > local admins group. ...
    (microsoft.public.windows.server.security)
  • Re: Local policy of this system does not permit you to logon interactively
    ... I did what you suggested just now and I did not see any reference to ... domain group policy has defined the same setting. ... that a domain group policies has defined this right. ... GPO: ...
    (microsoft.public.windows.server.sbs)
  • Re: Removing Sharing & Security tabs from the Group Policy
    ... You can easily enough remove the security tab through Group Policy but not ... computer from the network on your domain computers to allow only specified ... Client systems even the users are in Local Admins group. ... users the Sharing tab will be disabled. ...
    (microsoft.public.win2000.security)
  • Re: Limit Previously Used Passwords
    ... This is the tool to use to create and modify domain group policies. ... You will have a domain group policy for computers which is maybe where you ... You might want to consider combining it with enforced Minimum password ...
    (microsoft.public.windows.server.active_directory)