Creating a Local User with Group Policy

[PreviousPoster]

Is it possible to create a Local User on computers with Group Policy applied to an OU in our domain?

If so, how?

Thanks,

Brian McQuaig
UC Davis Graduate School of Managment

[PreviousPoster]

A domain computer will load any Computer Configuration policy settings "hitting" the machine (from any domain/OU GPO links).

Any User Configuration policy settings from domain GPOs will not hit local users logging on to the computer.

Does this answer your question?

[PreviousPoster]

Not really because I either don't understand the context of your answer or I'm a noob to Group Policy and don't understand your answer as it applies to my problem.

I need to create a local user on about 100 machines in my building. What I want to avoid is going to each machine and creating the new local user.

Can I do this though Group Policy and if so, how.

Thx,

Brian

[PreviousPoster]

Ahh OK - that's another thing then.... The answer is yes and no

You should use Group Policy Preferences - it's not exactly group policy, but please read this and you'll see why:
http://www.windowsecurity.com/articles/Group-Policy-related-changes-Windows-Server-2008-Part3.html
http://www.windowsecurity.com/articles/Group-Policy-related-changes-Windows-Server-2008-Part4.html
http://heidelbergit.blogspot.com/2008/02/group-policy-client-extensions.html

NB! You'll need a single Windows Server 2008 machine for managing GPP - until MS releases RSAT late March 2008 (for Windows Vista SP1+).

[PreviousPoster]

I'll read the references, but I'll let you know that we're running Win Svr 2003 and managing Group Policy with a Vista workstation. If this is going to require a server running 2008 I would think I'm beat on this one until we move to the upgrade.

I really appreciate the answers and I'll let you know in this thread what the outcome is.

Regards,

Brian
UC Davis Graduate School of Management

P.S. A shout out to my first GP instructor James Conrad! Great class, great instructor; great guy!

[PreviousPoster]

To avoid any confusion I'll just point out that GP Preferences are possible within a WS2003 AD - no problem really! It's just a matter of an updated management station.

[PreviousPoster]

I know this was posted back in February, but I wanted to add (for anybody who finds it during a search as I did) that I was able to use GP preferences with win2k3. 2k8 is NOT required.

I was able to replace some old vbscripts that created local users with GP preferences using RSAT on Vista in a SBS 2k3 domain. Flawless victory.

[PreviousPoster]

I was able to use GP preferences with win2k3. 2k8 is NOT required.

And just for the record - nobody ever said so in here :wink: