Solved

gpo help

Posted on 2014-10-16
2
189 Views
Last Modified: 2014-10-20
Hello Experts

I need from your expertise in creating a new GPO to allow an AD group named G_VDI_BIAdmin to be local system admins for all laptops under OU named VDI Desktops

My environment

Windows 2003 DCs, forest/domain functional level 2003

Clients  Windows 7 SP1
0
Comment
Question by:Jerry Seinfield
2 Comments
 
LVL 16

Accepted Solution

by:
Joshua Grantom earned 500 total points
ID: 40384300
1. Create a new GPO
2. Name it whatever you want
3. Add G_VDI_BIAdmin as Restricted Group in Computer Configuration -> Policies -> Windows Settings -> Security Settings --> Restricted Groups in your new GPO
4. In G_VDI_BIAdmin Restricted Group Properties window click add and under the This group is member of, type "Administrators"
5. Link this GPO to the OU "VDI Desktops"
6. Wait for the policy to apply.

Done.
0
 
LVL 13

Expert Comment

by:Rizzle
ID: 40384305
This can be achieved by using the Restricted Groups option in Group Policy.

This should be able to help: http://community.spiceworks.com/how_to/show/2123-add-an-active-directory-group-to-the-local-administrator-group-of-workstation-s
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question