RE: Default Security Groups

Giganews Newsgroups
Subject: RE: Default Security Groups
Posted by:  Dragos CAMARA (
Date: Wed, 21 Feb 2007

you can use restricted groups

if dont want to wipe the local administrators group you have to use
restricted groups memberof behavior :

MCSA Windows 2003 server

"Mike" wrote:

> By default, the Domain Admins group is a member of the Administrators group
> on all computers that have joined a domain, including the domain
> controllers.
> Does anyone know how to change this default behaviour? Specifically we would
> like to add a second security group to the computers administrator group,
> based on which OU the computer was created prior to joining, without using
> scripts.


In response to

Default Security Groups posted by Mike on Wed, 21 Feb 2007