troubleshooting Question

Need to Merge Restrictive Groups

Avatar of naifyboy123
naifyboy123Flag for Afghanistan asked on
Windows XPActive Directory
16 Comments1 Solution712 ViewsLast Modified:
I have an Administrators group in my Default Domain Restrictive Groups GPO.
The Restrictive Group contains groups of users which i want to have local admin rights on pcs.
This works fine.....
I now want to create a Site GPO with another Restrictive Administrators Group.
I would like merge the 2 policies, so the groups applied at the default domain policy level are ADDED to the site policy.
At the moment the site policy replaces the default domain restrictive groups.
It want the 2 to accumulate/merge.

I asked this question a while back - accepted the answer (shown below), but have only just realised it does not work. The group is not added to the local admins group although the ones that existed before are.

For an additive membership, you need to this "reverse": in the "Restricted Groups" policy, add the group to be added (NOT the Administrators group!), then in the following dialog, add "Administrators" to "This group is a member of" (NOT "This group has the following members").
please can someone tell me how to do this.


Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 16 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 16 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros