Local Administrators and GPO

  • Thread starter Thread starter joedonato
  • Start date Start date
J

joedonato

Hi.

I'm trying to create a gpo to add specific groups to the Local
Administrators (LA) group.

I've tested the Restricted Groups setting but the problem is it wipes
out existing members. We have 1000's of servers that have explicitly
added user accounts in the Local Administrators group that cannot be
removed.

I want to add the Server Operators group to the Local Adminsitrators on
every server in the domain. I also want these groups to be persistant
so if someone removes the group it will be readded.

Is there a good way I can achieve this without using a login/logoff
script?

Thanks In Advance!

-jd
 
Howdy!

I'm trying to create a gpo to add specific groups to the Local
Administrators (LA) group.
I've tested the Restricted Groups setting but the problem is it wipes
out existing members. We have 1000's of servers that have explicitly
added user accounts in the Local Administrators group that cannot be
removed.
Click to expand...

Answer in m.p.windows.group_policy. Please set a follow-up when posting
to multiple newsgroups.

Follow-up to: microsoft.public.windows.group_policy.

cheers,

Florian
 
Back
Top