Modifying Local Groups

[Adrian Moseley]

I have a second domain that I have built a trust relastionship with, and I
was wondering if it is possible to remotely add the domain admins group of
the new Domain to the local administrators group of several systems at one
time.

 

[Steven L Umbach]

You could use a Group Policy startup script using the net localgroup command
or Group Policy Restricted Groups with the "this group is a member of"
option. For Restricted Groups the computers you want to do this to must be
witching the scope of management of the Group Policy with Restricted Groups
configured. Do NOT use Restricted Groups on the domain container for what
you want to do. The link below explains more. --- Steve

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html ---
Group Policy Restricted Groups.