Restricted Groups Question

[msnews.microsoft.com]

I would like to add a group of users(Helpdesk group) to the local
administrators group on all workstation throughout my domain. Obviously
gonig from machine to machine and adding them isn't really an option. Can't
I control this through Group Policy and Restricted Groups? If so, what are
the procedures? I've checked out the KB article and it really wasn't all
that clear. Any suggestions would be most appreciated.

Thanks in advance.

 

[Laura E. Hunter \(MVP\)]

Open your Default Domain Policy (or another GPO that you've created for this
purpose) for editing.

Right-click Restricted Groups (under Computer Configuration\Windows
Settings\Security Settings\Restricted Groups).

Click Add Group.

Enter the name of the group you want to restrict (in this case
'Administrators'.)

Right-click the group, and then click Security.

Click Add, then Browse.

Select the domain group that you want to add to the local Administrators
group.