Select the group LOCALCOMPUTER\ADMINISTRATORS . By doing this you will be able to set the membership to whatever you want it to be. Hope this helps
Benton Chase Wink > ---------- > From: John F. Hann > Reply To: [EMAIL PROTECTED] > Sent: Tuesday, November 5, 2002 7:48 PM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] GPO Restricted Groups Question > > OK. How? I have to select a domain group and do not see how to set/select the >local administrators group??? > > -----Original Message----- > From: [EMAIL PROTECTED] >[mailto:ActiveDir-owner@;mail.activedir.org]On Behalf Of Sullivan, Kevin > Sent: Tuesday, November 05, 2002 7:43 PM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] GPO Restricted Groups Question > > > > Benton is correct. Restricted groups *overwrite* the local group when the >policy is refreshed. My company has a directory management product (Enterprise >Directory Manager) that allows the groups to be query based. We call the feature > "> >Active Groups> "> . There is code put into the notes field of the group that >dynamically adds or removes membership based on LDAP queries. This is a very powerful >feature that compliments situations where the Restricted Groups don> '> t quite >fulfill all the needs. > > > > Kevin Sullivan > > Aelita Software > > http://www.aelita.com > > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Benton.Wink@;bus.utexas.edu] > Sent: Tuesday, November 05, 2002 8:40 PM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] GPO Restricted Groups Question > > > > Additional is the wrong word. You can set the contents of membership of the >Administrators group. Whatever is set will be overwritten. Also, if someone >adds/removes a member, when group policy is refreshed (every 60 min +/- 30 min) the >group membership will be reset to what the policy dictates. > > I hope this is the answer you were looking for. > > Benton Chase Wink > > ------------------------------------------------- > Benton Chase Wink, CCNA MCSE > The University of Texas at Austin > McCombs School of Business > Enterprise Server Team > 512-471-9938 > 512-619-9016 > > -----Original Message----- > From: [EMAIL PROTECTED] >[mailto:ActiveDir-owner@;mail.activedir.org] On Behalf Of John F. Hann > Sent: Tuesday, November 05, 2002 7:35 PM > To: [EMAIL PROTECTED] > Subject: [ActiveDir] GPO Restricted Groups Question > > Can you use Restricted Groups to set additional membership for the local >Administrator group on workstations (W2K Pro and XP) and member servers? > > > > > > John F. Hann, MCP > > BancorpSouth > > Network Services - Administration & Infrastructure Management > > 662.678.7179 > > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
