If you use the XP MMC snap-in, there's a GPO setting called Restricted Groups. You put who you want in there and it gets populated in the local PC's groups. Two things though, one is that with this one, if you add a local user, it gets over-written by the GPO so you have to put that PC in a separate OU or not have it applied to that PC. Secondly, it's good because if someone adds a user to the local group that shouldn't be there, the GPO over-writes it. Alternatively, I have a .vbs script that goes out to every single PC (listed in a .txt file) and adds whatever groups we specify to go into whatever local groups we specify. Very nice indeed.
Cheers, Tony -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 17, 2002 2:10 AM To: NT 2000 Discussions Subject: Adding a group at domain join Hi All, I don't know if this possible :- I would like another group added to the local administrator group of PC's when they are joined to the domain, i.e. as the Domain admin group is automatically added. It would be even better if this could be done at an OU level... Any ideas? Thanks Robert Rutherford MIS Department - DEK +44 (0)1305 208232 +44 (0)7970 122362 ******************************************************************** This E-mail and any files transmitted with it are in commercial confidence and intended solely for the use of the individual or entity to whom they are addressed. If you have received this E-mail in error please notify the Administrator by E-mail ([EMAIL PROTECTED]). Any views or opinions expressed are solely those of the author and do not necessarily represent those of DEK Printing Machines Ltd., or its affiliates. ******************************************************************** This footnote signifies that this message has been checked for viruses using Norton and McAfee. ******************************************************************** ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to %%email.unsub%% ------ You are subscribed as [email protected] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
