local administrator privilege gpo

  • Thread starter Thread starter Julio Pereira
  • Start date Start date
J

Julio Pereira

How can I grant a Global Security Group access to local administrator group
of a group of computers in a OU?
I created the GP and gave permissions accordingly but I don't know where in
the policy this is done.

I want a security group to have admin rights of local computers without
making them members of the domain admins.

thanks
 
There are two methods to get this done that most people use. One is to
setup "Restricted Groups" in a GPO, or the other (that I use) is a computer
startup script that you can set in a GPO. Here is the script to put in a
..BAT file.

net localgroup "administrators" "<Domain>\<Group Name>" /add

It works for me everytime! You MUST put it in the computer startup scripts
though. Hope it helps!

Philip Nunn
 
Back
Top