Add Users to Local Group

From nswccWiki

There are two ways to add a domain group to a local admin group.

First it is best to create a global domain group you can use, rather than putting in individual users. e.g. LocalAdmins, LocalPowerUsers

The 1st way is easiest, but you can only add admin, you can not add Power Users.

Create a new group policy in GPMC, eg WS LocalRights.

Now in new policy expand

Computer Configuration
Windows Settings
Security Settings
Restricted Groups

Right Click and Add Group and paste BUILTIN\Administrators

Then add members:

DomainName\LocalAdmins, DomainName\Enterprise Admins, DomainName\Domain Admins, DomainName\Desktop Admins, etc.

Then assign this to the OU where your workstations are.

To add Power Users you need to use the new GPMC console and Group Policy Preferences, which are only available in Vista or Server 2008.

Use can use a Computer Configuration Preference item to add a Domain Group to the local Power Users group.

Extra Resources

• Creating and Managing Local Groups on Servers and Desktops with Preferences