Hi,

Use Restricted Groups in the Default Domain GPO
:http://www.jsifaq.com/SUBG/TIP3200/rh3251.htm

"Restricted groups, in the Default Domain Group Policy, allow you to define
the Members and Member Of properties. 
The Members list defines who should/should not belong to the restricted
group. The Member Of list specifies which groups the restricted group should
belong to. 
When a Restricted Group policy is enforced, any current member of a
restricted group that is not on the Members list is removed, with the
exception of Administrator in the Administrators group. Any user on the
Members list who is not currently a member of the restricted group is added.

With Member Of, the Restricted Group is NOT removed from other groups, but
it is added if missing. 
The Restricted groups policy can enforce membership of built-in or
user-defined groups, both Global and Domain Local
<../../SUBE/Tip2400/rh2407.htm>. When enforced, Restricted groups policy
automatically sets any computers local group membership to match the
membership list settings defined in the policy, overriding any changes made
by the local computer's Administrator"

Nick








> -----Original Message-----
> From: [EMAIL PROTECTED] [SMTP:[EMAIL PROTECTED]]
> Sent: 17 July 2002 15:59
> To:   [EMAIL PROTECTED]
> Subject:      [ActiveDir] Group into local admin at domain join
> 
> 
> Hi All,
> 
> I don't know if this possible :-
> 
> I would like another group added to the local administrator group of PC's
> when they are joined to the domain, i.e. as the Domain admin group is
> automatically added. It would be even better if this could be done at an
> OU
> level...
> 
> Any ideas?
> 
> Thanks
> 
> Robert Rutherford
> MIS Department - DEK
> +44 (0)1305 208232
> +44 (0)7970 122362
> 
> 
> 
> ********************************************************************
> This E-mail and any files transmitted with it are in 
> commercial confidence and intended solely for the use of
> the individual or entity to whom they are addressed.
> If you have received this E-mail in error please notify the 
> Administrator by E-mail ([EMAIL PROTECTED]).
> 
> Any views or opinions expressed are solely those of the
> author and do not necessarily represent those of 
> DEK Printing Machines Ltd., or its affiliates.
> ********************************************************************
> This footnote signifies that this message has been 
> checked for viruses using Norton and McAfee.
> ********************************************************************
> 
> List info   : http://www.activedir.org/mail_list.htm
> List FAQ    : http://www.activedir.org/list_faq.htm
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


This private and confidential e-mail has been sent to you by Egg.
The Egg group of companies includes Egg Banking plc
(registered no. 2999842), Egg Financial Products Ltd (registered
no. 3319027) and Egg Investments Ltd (registered no. 3403963) which
carries out investment business on behalf of Egg and is regulated
by the Financial Services Authority.  
Registered in England and Wales. Registered offices: 1 Waterhouse Square,
138-142 Holborn, London EC1N 2NA.
If you are not the intended recipient of this e-mail and have
received it in error, please notify the sender by replying with
'received in error' as the subject and then delete it from your
mailbox.

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to