I have a question for those that might have done it. I want to have a GP created on OU X. I want ALL computers to have 3 groups dropped into the local admin group of all PC's in that OU. Do I need to create a simple COMPUTER GP on the OU with the following: Edit Windows Settings\Security Settings\Local Policies\Restricted Groups Then simply add in DOMAINNAME\AdminGroup1 DOMAINNAME\AdminGroup2 DOMAINNAME\AdminGroup3 Will this OVERRIGHT anything there? Or just add these group in? I appreciate your assistance.
