none
How to assign Policies to a server local group within a domain GPO?

    Question

  • Hi.

    let me quickly draw the scenario. I have 10 servers. Each of them is a domain member and has a server local group (not a domain group!) called "technical users". Within this group I assign those domain service accounts that run services on that specific server.

    How can I assign policies to this local group using a domain GPO?

    Thanks for input

    Sven

    Thursday, November 5, 2015 7:28 AM

All replies

  • Do you mean filtering domain GPO using local group or manage local group members using domain GPO? You can't use local groups to manage gpo application. Local group membership can be managed using Restricted Groups policy settings in domain GPO.

    Gleb.

    Thursday, November 5, 2015 7:45 AM
  • I need to assign the right "Logon as a service" using a GPO to a local group called "technical users" on each domain member server. This computer local group has different members (users) on each server.

    https://technet.microsoft.com/en-us/library/cc739424(v=ws.10).aspx

    Thursday, November 5, 2015 7:55 AM
  • Just add your local group name (without domain prefix) in the policy

    Gleb.

    Thursday, November 5, 2015 8:43 AM
  • Does it work for you?
    Monday, November 9, 2015 2:21 AM