Maling a domain group member of Local Group

  • Thread starter Thread starter Patrickm
  • Start date Start date
P

Patrickm

Is there a way I can make a Domain global group a member of a PC local
group with out having to visit every machine?
 
You can use a Group Policy "startup" script using the net localgroup
"localgroupname" "domaingroup" \add command in a batch file or use
Restricted Groups. You could make the domain global group the restricted
group and specify the localgroup in "this group is a member of" at the OU
level with a GPO configured with restricted groups and add the computers to
the OU that you want this to happen to. The link below explains more on
G. --- Steve

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html
 
net localgroup "localgroupname" "domain\domaingroupname" \add

just to be clear what "domaingroup" was meaning . . .
 
Patrick,

Restricted Groups work well, but be careful with these and test before
you deploy widely. Remember that these will completely overwrite the
local group rather than being additive.

Ryan Hanisco
 
It depends how you configure RG as there are two ways. One that does as you
describe and the other that makes sure that the RG is a member of the group
you specify in which case it will not replace membership in the local group
you specify it to me a member of. Testing and backing up first is always
good advice. --- Steve
 
Back
Top