I have a "Domain Local Group" that must have the same rights and privileges to every object in our windows 2008 domain that the "Domain Admins" global group has by "default".
I cannot simply "add" the Domain Local Group to the "Domain Admins" global group because Active Directory does not allow that to happen.
Therefore, I need to get a list of every right and priveledge that the "Domain Admins" global group has by default and "custom add" all those rights and priveledges to my "Domain Local Group".
Does anyone have a script that adds all the rights and priveledges that "Domain Admins" global group has by default to a domain local group?
Or can anyone suggest a solution for doing this?
Please do not suggest a work around, I need to actually make a particular "Domain Local Group" have all the same rights and priveledges that the "Domain Admins" group has by default.
I have a single active directory domain controller. I need to accomplish this before adding anything else to my environment. Right now, everything is freshly set-up in default form.