Hi, I need to create a domain group which is local admin on the client computers in active directory enviroment: I followed the instructions at http://technet2.microsoft.com/Windo... How coul I implemet this restricted group, which instead of replaces local admin group, only merges whith this? The point is that the users who are local admins on the computers to remain local admins after applying the GPO. Thank You in advance...

Assuming you've already created the Security Group in Active Directory and added the users: Login to the machine with your Domain Admin account Right-click "My Computer" Manage Local Users and Groups Groups Administrators Add Browse to the Domain Group (From this location) Enter the name of the Group OK OK Life is more painless for those who are brainless.

Ok, I know this method works but the problem is that I don't want to do this manualy for every computer. That's why a chose to deploy this security group whit GPO. (Default Domain Policy - Computer Configuration\Windows Settings\Security Settings\Restricted Groups). I hope it's clear what I am trying to do...

i followed this guide http://www.windowsecurity.com/artic...