Local Administrators and GPO

[joedonato]

Hi.

I'm trying to create a gpo to add specific groups to the Local
Administrators (LA) group.

I've tested the Restricted Groups setting but the problem is it wipes
out existing members. We have 1000's of servers that have explicitly
added user accounts in the Local Administrators group that cannot be
removed.

I want to add the Server Operators group to the Local Adminsitrators on
every server in the domain. I also want these groups to be persistant
so if someone removes the group it will be readded.

Is there a good way I can achieve this without using a login/logoff
script?

Thanks In Advance!

-jd

 

[Florian Frommherz]

Howdy!

I'm trying to create a gpo to add specific groups to the Local
Administrators (LA) group.
I've tested the Restricted Groups setting but the problem is it wipes
out existing members. We have 1000's of servers that have explicitly
added user accounts in the Local Administrators group that cannot be
removed.

Answer in m.p.windows.group_policy. Please set a follow-up when posting
to multiple newsgroups.

Follow-up to: microsoft.public.windows.group_policy.

cheers,

Florian