AD Policy - Add domain groups to local groups

  • Thread starter Martin McGinley
  • Start date
M

Martin McGinley

I am new to AD. Can someone tell me if I can add built in
domain groups to local groups.
 
B

Bjoern Wolfgardt

Hello,

that's what windows does when you add a computer to a domain.
Builtin 'Domain-Admins' will be added to the local 'Administrators' group
and 'Domain Users' are added to the local users group.

cu
Bjoern Wolfgardt
 
M

Martin McGinley

Thanks for the repsonse...can you also create your own
groups (domain and local) and have the local gorups
updated via GP?

Again thanks for the help.
 
M

Matjaz Ladava [MVP]

I think you need to look into Restricted Groups GPO in your Group Policy.
With restricted groups you prescribe group membership. For example: you
could prescribe who is member of local Admin group on your workstations,
without doing this manually.

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000), MVP
(e-mail address removed)
http://ladava.com
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top