local administrator privilege gpo

[Julio Pereira]

How can I grant a Global Security Group access to local administrator group
of a group of computers in a OU?
I created the GP and gave permissions accordingly but I don't know where in
the policy this is done.

I want a security group to have admin rights of local computers without
making them members of the domain admins.

thanks

 

[Philip Nunn]

There are two methods to get this done that most people use. One is to
setup "Restricted Groups" in a GPO, or the other (that I use) is a computer
startup script that you can set in a GPO. Here is the script to put in a
..BAT file.

net localgroup "administrators" "<Domain>\<Group Name>" /add

It works for me everytime! You MUST put it in the computer startup scripts
though. Hope it helps!

Philip Nunn