Link to home
Start Free TrialLog in
Avatar of NFCC
NFCC

asked on

Users added to local administrators group through group policy

Is there a way to add users to the Local administrators group on the machine using group policy / restricted groups that will compliment (add to) the already existing users and not replace everything with what I have created in the restricted groups?  Every time I implement this I loose users who have been added to the local administrators group manually.  I want to keep these users and use GPO.
Avatar of Joseph Tshiteya
Joseph Tshiteya
Flag of United States of America image

In order to get the end result you desire, you will need to add the manually added users to the GPO setting that defines members of the local administrators group.  The reason for this is that when a GPO is applied to a system, it overrides the local security policy.
ASKER CERTIFIED SOLUTION
Avatar of LauraEHunterMVP
LauraEHunterMVP
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of MichaelRCook
MichaelRCook

LauraEHunterMVP:

This is an excellent tip. I had not thought to use Restricted Groups in this way.
I want to do the samething here!  However, I dont want the users to have administrator rights to their PC. I want users to have lets say "Power User" rights BUT I want to have admin rights to their PC.  

I dont want to have to go to each PC and manually put my name in as a admin and take them out and put them into another group.