You can do this with Restricted Groups policy. Normally people think of it as only able to mirror the membership listed (I was one of them), but you can actually use it to "add" a member without removing any of the existing ones. Other options would be to use a computer startup script, or the GPP extensions. GPP doesn't REQUIRE 2008 Server to work; you just have to have it or Vista SP1 (with RSAT pack) from which to create/edit GPOs utilizing those extensions. Jamie Nelson | Infrastructure Consultant | BI&T Operations | Devon Energy | Work: 405.552.8054 | http://www.dvn.com <http://www.dvn.com/> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Jonathan Finkbiner Sent: Friday, June 13, 2008 7:21 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Adding an account to a local group I would like to add an account to the local administrators group on an OU. I've been browsing through Computer Configuration options and I don't see anything promising. Does anyone one have a suggestion? No, I do not have the ability to use server 2008 options. J Jonathan Finkbiner Support Analyst Information Services Lifestyle Family Fitness Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.