|
Posted by =?Utf-8?B?c210aXQ=?= on April 14, 2006, 2:48 am
If you were Registered and logged in, you could reply and use other advanced thread options Thanks it was so obvious.
"Miha Pihler [MVP]" wrote:
> Hi,
>
> You could run _startup_ script on those computers. The script would look
> something like this
>
> net localgroup Administrators domain\ITsupport /add
>
> This way ITsupport will only be added -- without removing any other groups.
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> >I would like to use a GPO to add a group to exisitng groups or users in the
> > local admin group of many PC's. I do not want to remove any groups just
> > add,
> > this is due to the fact some users are permitted to have local admin
> > rights.
> >
> > example - add group named domain\ITsupport
> >
> > Can anyone guide me how best to do this, if even possible. I have read
> > some
> > pages that sugegst I can add explicit groups but this will wipe exisitng
> > users and groups on each refresh.
>
>
>
|