im confused about the Restricted group in Group policy !!

hello all

im confused when use restricted group in group policy can 1 explain it.

regards

first: restricted group use for?

restricted groups uses rest or modify membership of group.

i explain in 2 examples:

example 1:

if want reset local administration group membership , add ict-helpdesk group follow these steps.

the local administration group default contains (administrator) group, if reset local administrator group remove other groups , leaves administrator group only

now if want modify administrators group, , make contain administrators, domain admins , ict-helpdesk group

1-     right click on restricted group gp management editors, , click add group

2-     then have write local administrators group , click ok shown below :

3-     then add groups want member administrators group shown below :

4-     from client machine run gpupdate /force in order latest group policy applied , result should below :

notice other groups has been removed!.

example 2:

if have new group ict-tech      and want add administrators group without resetting membership.

1-     right click on restricted group gp management editors, , click add group

2-     click brows , bring ict-tech group , click ok shown below  :

3-     from second part click add , write administrators groups shown below :

click ok , , client machine run gpudpate /force again , should see below :

hope helps

regards

Windows Server  >  Windows Server General Forum