Re: Making a domain account a local admin wherever it is used?

mulhollands_at_rocketmail.com
Date: 10/25/05


Date: 25 Oct 2005 06:14:34 -0700


Steven L Umbach wrote:
> There are a couple of ways to do this - using Group Policy Restricted Groups
> or a Group Policy "startup" script that uses the net localgroup command that
> adds the domain user to the administrators group. See the link below on how
> to use Restricted Groups with the "member of" option which requires that the
> Windows 2000 domain controllers be SP4 to work correctly. You would want to
> use Restricted Groups at the OU level in your situation and not the domain
> container. The OU would contain the computers that you want Restricted
> Groups to apply to. --- Steve
>
> http://www.windowsecurity.com/articles/Using-Restricted-Groups.html
>

Thank you very much for that, Steve.

Stephen



Relevant Pages