Windows Forum

Ask something
Discussion Locked

Global Groups

0 helpful
11 replies

by mjkqb

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Every pc on the network has a global group called Tech Support that has been added to the local admin group. We have 300 users that need to be added to the Tech Support group so they will have sufficient rights to connect to a site that will automatically update their software. They will do updates once a month, then they must be removed from Tech Support.
Is there an easy way to add and remove these users from Tech Support. I can create Global Group for them, but I assume a Global Group cannot be added to Tech Support, which is already a Global Group.
We're using NT 4 servers.
Any help would be greatly appreciated.

11 replies

by gigelul

Hi,
In User Manager for Domain you must have two global groups:
-"TechSupport" which was added to local admin group on each PC and must be empty.
-"OnOff" which will contain these 300 users.

Add users to "TechSupport" group:
-From "User" menuin User Manager use "Select Users" chose "OnOff" group click on "select" and "close".
-From "user" menu chose "properties" then "groups" and adds "TechSupport" group.

Remove users from "TechSupport" group:
-From "User" menu in User Manager use "Select Users" chose "OnOff" group click on "select" and "close".
-From "user" menu chose "properties" then "groups" and remove "TechSupport" group.

by mjkqb

-"TechSupport" which was added to local admin group on each PC and must be empty.

We already have 50 of our techs in the Tech Support Group. Do they have to be removed first? If so, can they be added by creating another group (Tech) and use themethod you desrcibe. Can the new Tech group be in Tech Support the same time as "On-Off"?
Thanks

by joej

Try using a local tech support group instead of the global, and a global update group. Users join global, global join local. This way you can place users in the global update group, then place the global update in the local tech support. Apply the security to the local group. You can then remove the group when ever you like.

by gigelul

You can have at the same time in TechSupport groups OnOff and Tech.
But also you can use only Tech group (replace in my scenario OnOff with Tech).
You can chose which methode you wish to apply:
-remove this 50 users from TechSupport and add them in Tech (OnOff).
OR
-remove from local admin group the TechSupport and add empty Tech.

by doodler

With User Manager running NT 4.0 we have our local admin accounts (Your TechSupt.) As well as in the User Manager for Domains a group called Template Developer that users can be a part of. Adding the users to this group allows us to give them the rights to install software on the local machine without giving them the local admin that the Supt. group uses. It's as easy as keeping a list of who has the group added, then deleting the group once it's not needed.

This discussion is closed to new replies.