Are you using the restricted group features in the GPO to accomplish this? If so this is the intended design, only the administrators will be in the local adminstrators group.
Z ----- Original Message ----- From: Ehren Benson <[EMAIL PROTECTED]> To: Active Directory Admin Issues <[email protected]> Sent: Mon Jun 16 17:04:17 2008 Subject: GPO to add a group to all configured systems and LEAVE all groups currently in place. Hello! I have a GPO that is set to add a group called “helpdesk” as a member of the Builtin\Administrators group on the systems for which the GPO is configured. It does do this, however it REMOVES every other user or group that is already configured and replaces it with “helpdesk” which is not useful for the people who use the computers and need the admin privilege on it. Is there a setting I am not finding that will just ‘append’ the “helpdesk” group to the list of BUILTIN\Administrators instead of ‘replacing’ everything? It is currently configured under: Computer Configuration --Windows Settings ----Security Settings ------Restricted Groups --------Group:BUILTIN\Administrators | Members: PHY-AST\Helpdesk Thanks! Ehren J. Benson, MCSE Windows Systems Administrator Department of Physics and Astronomy Michigan State University 1209 A Biomed Phys Sci [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> 517-884-5469 ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~ ~ ~ ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~ ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~
