Hi there:

I know that you can use restricted groups in group policy to assign domain
groups to be members of the localgroup on computers in the domain. When the
restricted group dialogue boxes prompt me I can't figure out how to include
"localgroup" in there. It appears that it only allows me to select groups
from the domain only.

Any help would be great!

I would settle for using the "c> net localgroup administrators "dom\vir
users" /add" command but it doesn't like groups that have a space in the name
eventhough I have quotes around it.

Please help.

Thanks,
Charles

Re: How to Configure localgroup into Group Policy by Florian

Florian
Tue Jun 17 10:21:22 PDT 2008

Charles,

Charles schrieb:
> I know that you can use restricted groups in group policy to assign domain
> groups to be members of the localgroup on computers in the domain. When the
> restricted group dialogue boxes prompt me I can't figure out how to include
> "localgroup" in there. It appears that it only allows me to select groups
> from the domain only.

I've setup this a while ago. Let me know if it helps you:
http://www.frickelsoft.net/blog/?p=13

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Use a newsreader! http://www.frickelsoft.net/news.html

Re: How to Configure localgroup into Group Policy by Charles

Charles
Fri Jun 20 17:16:01 PDT 2008

This is excellent! Thanks much Florian! I wish the dialogue boxes would
distinguish local groups from domain groups. But I guess if it doesn't have
a domain name in front of it assumes that its local.

Thanks again!

"Florian Frommherz [MVP]" wrote:

> Charles,
>
> Charles schrieb:
> > I know that you can use restricted groups in group policy to assign domain
> > groups to be members of the localgroup on computers in the domain. When the
> > restricted group dialogue boxes prompt me I can't figure out how to include
> > "localgroup" in there. It appears that it only allows me to select groups
> > from the domain only.
>
> I've setup this a while ago. Let me know if it helps you:
> http://www.frickelsoft.net/blog/?p=13
>
> cheers,
>
> Florian
> --
> Microsoft MVP - Windows Server - Group Policy.
> eMail: prename [at] frickelsoft [dot] net.
> blog: http://www.frickelsoft.net/blog.
> Use a newsreader! http://www.frickelsoft.net/news.html
>