GP is unnecessary, simply add the extended right at a suitable OU (as you inferred) ... you'll need the advanced ACL editor dialog to do so ... look carefully, it's there.
-- Dean Wells MSEtechnology t Email: [EMAIL PROTECTED] http://msetechnology.com > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:ActiveDir- > [EMAIL PROTECTED] On Behalf Of Charlie Kaiser > Sent: Monday, November 27, 2006 8:29 PM > To: [email protected] > Subject: [ActiveDir] Selective auth, "allowed to auth" right, group > policy > > I have to add the "allowed to auth" right to a large number of > workstations so that workstation admins from another domain can access > them. Instead of adding that right to each computer object, is there a > way to do it with group policy at the OU level? I haven't been able to > find it. It's a painful manual process. > > We're using a selective auth external trust between forests. For other > reasons, we can't set up a "normal" trust. > > Thanks... > > ********************** > Charlie Kaiser > W2K3 MCSA/MCSE/Security > Systems Engineer > Essex Credit / Brickwalk > 510 595 5083 > ********************** > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/[email protected]/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/[email protected]/
