Group Policy for Admin Rights

[dylan619]

I've found a few threads on this, but no solutions... I would like to give a Global Group local admin rights on a bunch of computers. I was hoping that I could create an OU, and move the computers there, then make a group policy that adds this groups to the local admin group on the pcs... but I can't seem to figure out how to do this.
Has anyone here been successful with this?

 

[brontosaurus]

sure, you're on the right track. create an OU for those machines and move them into it. then, create a new GPO for that OU, and under the Computer Configuration portion go to Windows Settings\Security Settings\Restricted Groups. Add the new group "Administrators". Once it's added, go into it's properties and adjust the membership as you see fit...

 

[dylan619]

That looks good - but how do I apply the policy after I move a computer into that OU?

 

[brontosaurus]

if you create and edit the policy on the OU itself, consider it applied.

 

[MNMike]

Is there any way to do this without moving the computers out of the default Computers container?