domain2local

E

ezsytems

I'm looking for a way to ad domain groups to local groups.

Machines and users being part of a domain cannot use
special apps on workstations because they don't have the
correct level of authority. Adding domain global groups
to the local adminstrator group solves this issue.

Ofcourse editing the registry for every new app is a
possibility too, but it weares me out.

I'm looking for a smart script that can add domain global
groups to local administrator groups. I could not find a
satisfying answer using vbs, in fact no solution at all.

Anyone that can help me with this problem? Hope so.

Thanx
 
C

Christian Schindler

You can use the Restricted Groups option in GPOs. With this policy,
you are able to centrally modify the group membership of a local group. So,
you can create
one for Administrators, adding in the desired domain global groups to that
group

--

Christian Schindler
MCSA / MCSE / MCT / CCEA

Senior Consultant

NTx BackOffice Consulting Group Austria
mailto:[email protected]
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

creating lots and lots of gorups 8
NTFS Permissions Architecture - Best Practices? 6
Querying AD Groups 2
Local Groups Not Visible 2
Group Setup 1
Removing domain local groups from Wind XP local administrators gro 3
NetUserGetLocalGroups in multi-domain AD environment 2
Logoff script for single user 1

Top