• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 367
  • Last Modified:

Local admin rights with Domain_local group

I'm using a Group policy and created a startup script that adds a group to the local admin.  That part works fine.  If I add the (Groupname_Global) it works but if I add (Groupname)_local it does not.  The users are in (Groupname)_Global and its a member of (Groupname)_Local.  Any suggestioins as to why (Groupname)_Local is not working?
0
Cveselka
Asked:
Cveselka
1 Solution
 
Rich RumbleSecurity SamuraiCommented:
You may want to try this script here: http://www.microsoft.com/technet/scriptcenter/resources/qanda/oct04/hey1008.mspx
in the --> strComputer = "atl-ws-01" <--instead of placing each and every computer in as they have done you can use a varible like %computername%

 strComputer = "%computername%"
and you can use %username% instead of putting in the users name
-rich
0
 
WallsyCommented:
Acoording to most of the MS documentation I've seen, a local group can only have a global group or user in it. The local XP security is more closely related to NT than AD... (It's also mentioned in the link that richrumble pasted above.)

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/d7429d37-4dea-4271-99cf-57b7a4451a6a.mspx

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/d7429d37-4dea-4271-99cf-57b7a4451a6a.mspx

As a matter of interest, why would you want to use the local group instead of the global group?

Cheers,

Wallsy
0

Featured Post

2017 Webroot Threat Report

MSPs: Get the facts you need to protect your clients.
The 2017 Webroot Threat Report provides a uniquely insightful global view into the analysis and discoveries made by the Webroot® Threat Intelligence Platform to provide insights on key trends and risks as seen by our users.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now