I posted something about this a week or so ago. Please check the archive. You want to be sure that you use the new "memberof" option in the new "Restricted Group" policy. That way, nothing is deleted. See my example in the archive. Sincerely,
Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon ________________________________ From: [EMAIL PROTECTED] on behalf of Gideon Ashcraft Sent: Thu 10/13/2005 9:11 AM To: [email protected] Subject: Re: [ActiveDir] Adding Helpdesk Group to Local Admin Group Be very wary of this one, I removed Domain Admin from the local admin group on every computer (including servers) in my domain, fortunately I had changed the local admin password on all my servers before I did this and I only lost one PC that didn't have our default PC admin password. I highly advise setting up a test domain to learn how to properly use this tool, one slight goof and you have created an 80 hr work week. Gideon Ashcraft Network Admin Screen Actors Guild -----Original Message----- From: "Salandra, Justin A." <[EMAIL PROTECTED]> Sent: Oct 13, 2005 8:11 AM To: [email protected] Subject: [ActiveDir] Adding Helpdesk Group to Local Admin Group How would I utilize Restriced Groups in a GPO to add in a Helpdesk Group that I have for my helpdesk staff to have administrative rights on a local PC with out having to touch each PC and without screwing up the local admin group? Justin A. Salandra MCSE Windows 2000 & 2003 Network and Technology Services Manager Catholic Healthcare System 646.505.3681 - office 917.455.0110 - cell [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
