Local admin rights with Domain_local group

I'm using a Group policy and created a startup script that adds a group to the local admin.  That part works fine.  If I add the (Groupname_Global) it works but if I add (Groupname)_local it does not.  The users are in (Groupname)_Global and its a member of (Groupname)_Local.  Any suggestioins as to why (Groupname)_Local is not working?
CveselkaAsked:
Who is Participating?
 
WallsyCommented:
Acoording to most of the MS documentation I've seen, a local group can only have a global group or user in it. The local XP security is more closely related to NT than AD... (It's also mentioned in the link that richrumble pasted above.)

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/d7429d37-4dea-4271-99cf-57b7a4451a6a.mspx

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/d7429d37-4dea-4271-99cf-57b7a4451a6a.mspx

As a matter of interest, why would you want to use the local group instead of the global group?

Cheers,

Wallsy
0
 
Rich RumbleSecurity SamuraiCommented:
You may want to try this script here: http://www.microsoft.com/technet/scriptcenter/resources/qanda/oct04/hey1008.mspx
in the --> strComputer = "atl-ws-01" <--instead of placing each and every computer in as they have done you can use a varible like %computername%

 strComputer = "%computername%"
and you can use %username% instead of putting in the users name
-rich
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.