I have done this in two ways: 1. GPO: There is a policy that will wipe out all current members of the Administrators Group and replace it with what you have in the GPO. Just be sure to include EVERYONE you would like listed, the local Administrators group even. I find this handy for machines that may have been played with too much and you really need to clean up!
2. CSE: The relatively new client side extensions through Preferences I have started using and it will ADD an individual group or user to whatever is currently there. This is handy if you don't want to totally stir the existing. Have fun! On Tue, Apr 7, 2009 at 8:13 PM, Joseph L. Casale <[email protected]>wrote: > I have a GPO that adds a group into the local admin group on every wkst. > > Problem is that it overwrites any manual additions. Is there a way to > control this behavior > > or a better way to do this so that if a user for whatever reason has to be > added, it can be > > done at the wkst without risk of losing this? > > > > Thanks! > jlc > > > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
