Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Add "other" groups to computer when joining domain  (Read 10313 times)

0 Members and 1 Guest are viewing this topic.

chack22

    Topic Starter


    Newbie

    Add "other" groups to computer when joining domain
    « on: November 20, 2009, 02:11:03 PM »
    I am trying to find a way to add a number of security groups to a computers Local Administrators when they are joined to a domain, much like the Domain Admins group is dropped into each when they are joined. So a couple of questions...

    Is there a way to automatically do this when they are joined?
    Can it be applied via Group Policy?

    I apologize if this has been addressed, and I can't quite get the phrasing correct to get a result on google...

    Thanks!

    michaewlewis



      Intermediate
    • Thanked: 26
      • Yes
      • Yes
    • Experience: Expert
    • OS: Unknown
    Re: Add "other" groups to computer when joining domain
    « Reply #1 on: November 20, 2009, 04:15:28 PM »
    Not really sure what you are wanting to do..... Are you trying to migrate custom security groups from your DC into client computers? If so, maybe check out the Restricted Groups in Group Policy/Policies/Windows Settings/Security Settings. That may have what you're looking for. Not sure, though since I don't really know what you're trying to accomplish.

    chack22

      Topic Starter


      Newbie

      Re: Add "other" groups to computer when joining domain
      « Reply #2 on: November 21, 2009, 03:48:05 PM »
      I want to be able to add other domain security groups to the local computers Administrators group automatically when the computer is joined to the domain, just like the "Domain Admins" group is dropped in when joined.

      michaewlewis



        Intermediate
      • Thanked: 26
        • Yes
        • Yes
      • Experience: Expert
      • OS: Unknown
      Re: Add "other" groups to computer when joining domain
      « Reply #3 on: November 25, 2009, 10:29:10 AM »
      The domain security groups are global, so they should be inherited by any computer on the domain.