You can accomplish this using Restricted Groups "member of" functionality. If you use the "member" facility of Restricted Groups, it limits the group to the members specified in the policy which sounds like what is happening to you.
This blog describes it nicely. http://www.frickelsoft.net/blog/?p=13 From: Joseph L. Casale [mailto:[email protected]] Sent: Tuesday, April 07, 2009 5:13 PM To: NT System Admin Issues Subject: Adding users as Admins I have a GPO that adds a group into the local admin group on every wkst. Problem is that it overwrites any manual additions. Is there a way to control this behavior or a better way to do this so that if a user for whatever reason has to be added, it can be done at the wkst without risk of losing this? Thanks! jlc ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
