Local File Permissions

you can create a new ou and move the computer
to it. create a gpo and apply it to that ou
- you can apply a gpo to a group at the domain level however it is not recomended.

start with programs,admin tools,ad users an computers.
right click your domain select properties ,clickgroup policy.
click the new button,a new gpo will be created, name it.
hilite this group and select properties.
you can add and remove groups and modify their attributte here

hope this helps and have a nice week-mike

thanks for the answers, however the problem is not with creating a GPO or filtering a GPO using groups or even domain group membership. My question pertains to assigning or managing local NTFS and Local group permissions on a workstation via a GPO. I don't believe there is a way but perhaps it can be done using scripts.

jeff, how about the using the 'member of' tab, of the user properties dialog box? this is designed for managing local users and groups. go to local users and groups, double click a user, select the 'member of' tab,and click add. then select the group you want them added to. if you want to remove them from a group, then from the 'member of' tab, hilite the group you want them deleted from and click remove. hope this works, mike

This question was closed by the author