Home / server / Questions / 164478
Accepted
ItsPronounced
Asked: 2010-07-28 06:56:01 +0800 CST

Set default domain user groups on user/computer creation

  • 772

Currently on our domain, when a new user is created, they are automatically added to the Domain User group which is fine.

Also, when a new computer is added to the domain, the Domain Admin group is automatically added to the local Administrators group.

Where do I configure these settings? For example, when a new computer is added to the domain, I want to automatically add the Domain User group to the local computer's Network Configuration Operators group so that domain users can edit their IP address if they need to (when travelling on hotel networks).

Thanks

windows-server-2003 active-directory domain

1 Answers

  1. Best Answer

    You can use the Restricted Groups feature in a Group Policy to enforce membership of local groups on workstations/servers.

    http://support.microsoft.com/kb/279301

    http://www.frickelsoft.net/blog/?p=13

    • 3