Windows 2003 - Applying GPO for SupportAdmin

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I work in a hospital that has around 5000 client pc's and around 350 servers.
We are looking at applying a GPO that will add SupportAdmin group to the
local admins on all pc's on our network without applying it to the servers.
This would be easily done if out servers were all located under 1 OU, but
they aren't and won't be. I need a way to apply the GPO at the domain level,
but not have it apply to the servers. Is there any good way to accomplish
this?
 
You could:
Apply a policy and filter it by security group
Maintain a security group of all servers but not PCs.
If you can, find an automated way to maintain the security group of domain
servers.
Anthony
 
Back
Top