We have a machine 'A'. When a user logs into 'A', he should belong to
'A-group'.
If that user logs into machine 'B' he should now be in 'B-group' (but no
longer a member of 'A-group')
Any idea how to do this? I've got Win2k3 server and WinXPe clients (thin
clients)
This is necessary to run an application on the terminal server that depends
on which workstation the user is logged into.
Logon script perhaps? Local to the machine or in Active Dir?
Graham

Are you aware that the user in question must have permissions to modify
group membership for both these groups in this scenario? Is it ok for you?

--
Dmitry Korolyov [(E-Mail Removed)]
MVP: Windows Server - Active Directory


"Graham Prentice" <gprentice_@_oakville.ca> wrote in message
news:#(E-Mail Removed)...
We have a machine 'A'. When a user logs into 'A', he should belong to
'A-group'.
If that user logs into machine 'B' he should now be in 'B-group' (but no
longer a member of 'A-group')
Any idea how to do this? I've got Win2k3 server and WinXPe clients (thin
clients)
This is necessary to run an application on the terminal server that
depends
on which workstation the user is logged into.
Logon script perhaps? Local to the machine or in Active Dir?
Graham

That might be a problem, but I'm willing to risk it for now.
Any ideas of how to add/remove from group membership based on the workstation logged into?
I've been searching for utilities/scripts but have not found exactly what I'm looking for yet.
Graham
"Dmitry Korolyov [MVP]" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
Are you aware that the user in question must have permissions to modify group membership for both these groups in this scenario? Is it ok for you?

--
Dmitry Korolyov [(E-Mail Removed)]
MVP: Windows Server - Active Directory


"Graham Prentice" <gprentice_@_oakville.ca> wrote in message news:#(E-Mail Removed)...
We have a machine 'A'. When a user logs into 'A', he should belong to
'A-group'.
If that user logs into machine 'B' he should now be in 'B-group' (but no
longer a member of 'A-group')
Any idea how to do this? I've got Win2k3 server and WinXPe clients (thin
clients)
This is necessary to run an application on the terminal server that depends
on which workstation the user is logged into.
Logon script perhaps? Local to the machine or in Active Dir?
Graham

You can check if Restricted Groups feature of the Group Policy might be of
any help for you. Are these groups domain groups or local groups on the
terminal server/workstation?

--
Dmitry Korolyov [(E-Mail Removed)]
MVP: Windows Server - Active Directory


"Graham Prentice" <gprentice_@_oakville.ca> wrote in message
news:#(E-Mail Removed)...
That might be a problem, but I'm willing to risk it for now.
Any ideas of how to add/remove from group membership based on the
workstation logged into?
I've been searching for utilities/scripts but have not found exactly what
I'm looking for yet.
Graham
"Dmitry Korolyov [MVP]" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
Are you aware that the user in question must have permissions to modify
group membership for both these groups in this scenario? Is it ok for you?

--
Dmitry Korolyov [(E-Mail Removed)]
MVP: Windows Server - Active Directory


"Graham Prentice" <gprentice_@_oakville.ca> wrote in message
news:#(E-Mail Removed)...
We have a machine 'A'. When a user logs into 'A', he should belong to
'A-group'.
If that user logs into machine 'B' he should now be in 'B-group' (but
no
longer a member of 'A-group')
Any idea how to do this? I've got Win2k3 server and WinXPe clients
(thin
clients)
This is necessary to run an application on the terminal server that
depends
on which workstation the user is logged into.
Logon script perhaps? Local to the machine or in Active Dir?
Graham