GPO for User Accounts

wantabe2
wantabe2 used Ask the Experts™
on
I need to push out a specific domain user account to numerous workstations. Is there any way to do this with a GPO? I have a Windows 2008 domain with Windoiws Vista & Windows 7 clients. Thanks
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Most Valuable Expert 2011
Top Expert 2011

Commented:
Description of Group Policy Restricted Groups
http://support.microsoft.com/kb/279301

Familiar with this?
While using restricted groups will definitely work for this. I think the new abilities offered by group policy preferences are alot easier and more intuitive to use.


See the following link under the section heading "Setting local Administrator Passwords /Administering local users and groups"
http://www.frickelsoft.net/blog/downloads/10%20things%20Group%20Policy%20Preferences%20does%20better.pdf
Technical Lead
Top Expert 2011
Commented:
I personally would not recommend using restricted groups to do this- restricted groups is a very powerful tool and

simple mistakes can mean big headaches. You don't need to get any more complex than necessary.
 
Instead, there is a much easier way to accomplish what you want:
Set a startup script in group policy with the following line:
NET localgroup Administrators /add "domain_name\domain_group
That's it....the next time the computers are started, the group will be added to the local admin group.

Instead of group you can mention userid as below
NET localgroup Administrators /add "domain_name\domain_Userid

Hoever if you want to configure restricted group refer this
link:http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial