Is it possible to automate common Group Policy tasks?
A new feature in Group Policy is the control of local Group Memberships on workstations or servers. This feature can be useful but often can be found a little restrictive due to the fact that the groups/users you set to be members of the local group will be the only ones, all other groups or users will be removed. You can configure Restricted Groups in the Group Policy Editor under Computer Configuration/Windows Settings/Security Settings/Restricted Groups. This is great in highly standardised, highly secure environments but for the most part you may just want to add a group to the local group and leave the existing membership as is. This can be done using a start-up script.
