[gptalk] Re: Adding an account to a local group
- From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Wed, 18 Jun 2008 07:49:09 -0700
I should also mention that the new Group Policy Preferences feature has some
additional features around local group management that are pretty nice and
worth looking into.
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Jason B. Halladay
Sent: Wednesday, June 18, 2008 7:41 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Adding an account to a local group
Hi Jamie,
I am one of those that believe Restricted Groups doesn't just "add" an
account to the local administrators group without removing any other
members. Can you explain (or point me to a reference on) how to use
"restricted groups" to simply add another member without removing any
members?
We most commonly use group policy to run a startup script that adds members
to the local administrators group. This works well but if using the
restricted groups policy would work, that would be one less script we'd have
to maintain.
Thanks,
Jason
On 6/13/08 7:58 AM, Nelson, Jamie wrote:
You can do this with Restricted Groups policy. Normally people think of it
as only able to mirror the membership listed (I was one of them), but you
can actually use it to "add" a member without removing any of the existing
ones.
Other options would be to use a computer startup script, or the GPP
extensions. GPP doesn't REQUIRE 2008 Server to work; you just have to have
it or Vista SP1 (with RSAT pack) from which to create/edit GPOs utilizing
those extensions.
Jamie Nelson | Infrastructure Consultant | BI&T Operations | Devon Energy |
Work: 405.552.8054 | http://www.dvn.com <http://www.dvn.com/>
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Jonathan Finkbiner
Sent: Friday, June 13, 2008 7:21 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Adding an account to a local group
I would like to add an account to the local administrators group on an OU.
I've been browsing through Computer Configuration options and I don't see
anything promising. Does anyone one have a suggestion?
No, I do not have the ability to use server 2008 options. J
Jonathan Finkbiner
Support Analyst
Information Services
Lifestyle Family Fitness
_____
Confidentiality Warning: This message and any attachments are intended only
for the use of the intended recipient(s), are confidential, and may be
privileged. If you are not the intended recipient, you are hereby notified
that any review, retransmission, conversion to hard copy, copying,
circulation or other use of all or any portion of this message and any
attachments is strictly prohibited. If you are not the intended recipient,
please notify the sender immediately by return e-mail, and delete this
message and any attachments from your system.
Other related posts:
