If you need more information on how to use restricted groups, they are covered fairly well here:
http://www.windowsecurity.com/articles/Using-Restricted-Groups.html Tony -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond Sent: Tuesday, 4 October 2005 12:14 p.m. To: [email protected] Cc: '# Jose Medeiros-IBM (E-mail)' Subject: RE: [ActiveDir] AD Question for your peers-GPO Yes. You want to use the Restricted Groups function in the computer config area. Be aware it is a replacement not a merge, so, things already in there will get blasted Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Medeiros, Jose Sent: Monday, October 03, 2005 4:12 PM To: [email protected] Cc: # Jose Medeiros-IBM (E-mail) Subject: [ActiveDir] AD Question for your peers-GPO We have three child domains off our root domain and basically we want to add a global or universal group ( We are in Native mode on AD 2003) to the local admin group on member servers & workstations in a child domain, every time a new computer account is to AD. Is this possible using a GPO? ( Please read the message below ) Jose :-) > -----Original Message----- > From: Ebias, Danilo > Sent: Monday, October 03, 2005 11:57 AM > To: Medeiros, Jose > Subject: AD Question for your peers > > Jose, > Could you check with your peers about how we could define a group policy that would add a universal group or global group automatically into the local admin group of computers into a specific OU? I remember reading that this is possible, but I can't find any documentation about it. > > > Thanks, > dan > > Danilo Ebias, Jr. > ADP | National Account Services > ProBusiness Division | Information Services > 925.737.7035 > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
