Group Policy to change local group settings

[Guest]

i would like to add a domain group to the local administrators group of every
workstation on our network. is this possible?

my goal that im trying to accomplish is, to create a new group that has
administrative control over all workstations or some servers, but without
having them in the Domain Administrators group. ive created my new group,
"desktop support", populated this group into "server operators", "print
operators", etc etc, but adding this group to each local admins group, is
something i would like to accomplish via group policy (so i dont have to
visit each workstation).

or, if there is an alternate solution that someone would like to shed light
on for me, i would be greatly appreciative.

thanks,
jonathan

 

[Jerold Schulman]

i would like to add a domain group to the local administrators group of every
workstation on our network. is this possible?

my goal that im trying to accomplish is, to create a new group that has
administrative control over all workstations or some servers, but without
having them in the Domain Administrators group. ive created my new group,
"desktop support", populated this group into "server operators", "print
operators", etc etc, but adding this group to each local admins group, is
something i would like to accomplish via group policy (so i dont have to
visit each workstation).

or, if there is an alternate solution that someone would like to shed light
on for me, i would be greatly appreciative.

thanks,
jonathan

Yes. See tip 5319 in the 'Tips & Tricks' at http://www.jsiinc.com
It uses Group Policy Restricted Groups.


Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com