Sunday, September 17, 2006

Add Domain Group to Local Group with Group Policy

If you just want to recreate membership, go to:
Computer Configuration --> Windows Settings --> Security Settings --> Restricted Groups. Right click and select Add Group. Now you will enter the name of the Group - in our case select Administrators (this is a real Group!). In Members of this Group select add, select who you want to include (Domain\Domain Administrators, Domain\Other Group) and that's it!

If you want to modify membership:
Use the same procedure but instead of modifying Members of this Group you will modify This group is a member of ... The name of the Group is the name of the Group you want to add. So it will be Domain\Other Group and we'll make this Group a member of the Administrators Group.

No comments:

Post a Comment