Solved

gpo help

Posted on 2014-10-16
2
193 Views
Last Modified: 2014-10-20
Hello Experts

I need from your expertise in creating a new GPO to allow an AD group named G_VDI_BIAdmin to be local system admins for all laptops under OU named VDI Desktops

My environment

Windows 2003 DCs, forest/domain functional level 2003

Clients  Windows 7 SP1
0
Comment
Question by:Jerry Seinfield
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 16

Accepted Solution

by:
Joshua Grantom earned 500 total points
ID: 40384300
1. Create a new GPO
2. Name it whatever you want
3. Add G_VDI_BIAdmin as Restricted Group in Computer Configuration -> Policies -> Windows Settings -> Security Settings --> Restricted Groups in your new GPO
4. In G_VDI_BIAdmin Restricted Group Properties window click add and under the This group is member of, type "Administrators"
5. Link this GPO to the OU "VDI Desktops"
6. Wait for the policy to apply.

Done.
0
 
LVL 13

Expert Comment

by:Rizzle
ID: 40384305
This can be achieved by using the Restricted Groups option in Group Policy.

This should be able to help: http://community.spiceworks.com/how_to/show/2123-add-an-active-directory-group-to-the-local-administrator-group-of-workstation-s
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question