gpo help

Hello Experts

I need from your expertise in creating a new GPO to allow an AD group named G_VDI_BIAdmin to be local system admins for all laptops under OU named VDI Desktops

My environment

Windows 2003 DCs, forest/domain functional level 2003

Clients  Windows 7 SP1
Jerry SeinfieldAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Joshua GrantomSenior Systems AdministratorCommented:
1. Create a new GPO
2. Name it whatever you want
3. Add G_VDI_BIAdmin as Restricted Group in Computer Configuration -> Policies -> Windows Settings -> Security Settings --> Restricted Groups in your new GPO
4. In G_VDI_BIAdmin Restricted Group Properties window click add and under the This group is member of, type "Administrators"
5. Link this GPO to the OU "VDI Desktops"
6. Wait for the policy to apply.

Done.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
RizzleCommented:
This can be achieved by using the Restricted Groups option in Group Policy.

This should be able to help: http://community.spiceworks.com/how_to/show/2123-add-an-active-directory-group-to-the-local-administrator-group-of-workstation-s
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.