none
How to assign Policies to a server local group within a domain GPO?

    Question

  • Hi.

    let me quickly draw the scenario. I have 10 servers. Each of them is a domain member and has a server local group (not a domain group!) called "technical users". Within this group I assign those domain service accounts that run services on that specific server.

    How can I assign policies to this local group using a domain GPO?

    Thanks for input

    Sven

    Thursday, November 05, 2015 7:28 AM

All replies

  • Do you mean filtering domain GPO using local group or manage local group members using domain GPO? You can't use local groups to manage gpo application. Local group membership can be managed using Restricted Groups policy settings in domain GPO.

    Gleb.

    Thursday, November 05, 2015 7:45 AM
  • I need to assign the right "Logon as a service" using a GPO to a local group called "technical users" on each domain member server. This computer local group has different members (users) on each server.

    https://technet.microsoft.com/en-us/library/cc739424(v=ws.10).aspx

    Thursday, November 05, 2015 7:55 AM
  • Just add your local group name (without domain prefix) in the policy

    Gleb.

    Thursday, November 05, 2015 8:43 AM
  • Does it work for you?
    Monday, November 09, 2015 2:21 AM