Windows R2 AD Series one: Domain users automatically join local administrators

Start → Run gpmc.msc into Group Policy Management, find default Domain policy, right-click Edit, go to user Configuration → preferences → control Panel settings → Local Users and groups, in the right margin, create a new local group, because you want to modify the local group information on the client computer, So select New Local group as shown in:

650) this.width=650; "title=" 3.png "alt=" wkiom1ytam2tijvkaamvagtk3pq480.jpg "src=" http://s3.51cto.com/wyfs02/M00/ 74/e0/wkiom1ytam2tijvkaamvagtk3pq480.jpg "/>

650) this.width=650; "title=" 4.png "alt=" wkiol1ytagaclasfaap2tu4dfi8286.jpg "src=" http://s3.51cto.com/wyfs02/M02/ 74/dc/wkiol1ytagaclasfaap2tu4dfi8286.jpg "/>

The update in the action represents updating the members of the domain client Administrators group, not the new group; Add current user means adding the domain account at login to the local Administrators group of the client system, as long as the domain account is logged in, add it to the local Administrators group, You can also select Delete all member users on the right, or delete all member groups, which means that when the currently logged-on user is added to the local Administrators group, the other member users or groups are removed to dynamically join the Administrators group, that is, always keep the most recently logged-on user in the Administrators group. deleted by other users.

With this method you can also add the current login user to the Power User group, which is more than the user group's permissions, the two specific differences can be self-Baidu.

This article is from the "Progress a little every day" blog, be sure to keep this source http://yujia2015.blog.51cto.com/59379/1706174

Windows R2 AD Series one: Domain users automatically join local administrators