adding domain group to local admin group. 1

[NewToo]

Hello,

I was wondering if any one knows if there is a GPO that I can create that when a computer is join to a domain it will add a domain group into the local computer administrator group?

thanks
newtoo

 

[FNBIT]

Yes you can. It is in this area of the GPO: computer config -> windows settings -> security settings -> restricted groups


You would then add a group Administrators, then add the groups you want to have local admin access. You will need to include the Domain Admins group or it will be removed when the GPO is applied.

Hope this helps.

- Chris