Local admins group

[grabrail]

What is the best way to automatically add a group/user to the local admins group of new servers as they are added to my domain.

Windows 2000 Domain, all servers will be windows 2000/2003.

My predecessor tried this by playing with restricted groups in group policy and consequently destroyed all manualy added groups and users and caused massive downtime for some of our servers.

I need to be able to dio this properly.

Thanks
Jade

 

[rzs0502]

I think the best way would be to add a domain group to the local administrators group.
So each workstation would have an entry in the Administrators group such as NTDOM\Domain Users


"If you always do what you've always done, you will always be where you've always been."

 

[grabrail]

But I want it so that when a server is added to the domain, the group I create is automatically added to the local admins group on the new server.

I have over 60 servers accross 3 sites and about 2000 workstations, so manually adding the group to local admins on each machine would take too much time. I want to be able to control this through group policy if possible, because in the wise words of Microsoft group policy should allow full central control of your netwok.

I know it can be done, Im just not sure how, and Im a little nervous about it because I dont want to cause the same problems our company had before

Thanks
Jade