Active Directory Policy

  • Thread starter Thread starter Daniel Padilla
  • Start date Start date
D

Daniel Padilla

I want to create a policy for a group of users that are part of the Tech
Support Staff and make them local administrators on all available desktops
in the domain so i don't have to gave them "Domain Administrators" access so
they can perform their job without any problems.


Any idea on how to achieve this ?

Thanks in advance.

DANIEL
 
Wouldn't that take all of the other users of that group
out of the local admins though? It sounds like he wants
to add to the already listed groups and users....
Dan
 
Have a read of the kb article. There are two ways of using Restricted
Groups; one is to replace the current group membership with whatever you
specify in the GPO. The other is to merge whatever is there already with
what you specify in the GPO. So you can have it either way.
 
Back
Top