AD Policy - Add domain groups to local groups

  • Thread starter Thread starter Martin McGinley
  • Start date Start date
M

Martin McGinley

I am new to AD. Can someone tell me if I can add built in
domain groups to local groups.
 
Hello,

that's what windows does when you add a computer to a domain.
Builtin 'Domain-Admins' will be added to the local 'Administrators' group
and 'Domain Users' are added to the local users group.

cu
Bjoern Wolfgardt
 
Thanks for the repsonse...can you also create your own
groups (domain and local) and have the local gorups
updated via GP?

Again thanks for the help.
 
I think you need to look into Restricted Groups GPO in your Group Policy.
With restricted groups you prescribe group membership. For example: you
could prescribe who is member of local Admin group on your workstations,
without doing this manually.

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000), MVP
(e-mail address removed)
http://ladava.com
 
Back
Top