Question:

I have one Domain Global Group name ABC. I have one Domain Local Group name XYZ.
I have Windows 2003 Server. We have purchased 15 new application servers. ABC group has to provide various type of access to the servers.

What I did.
1. Create a Domain Local Group name XYZ and grant appropriate access to the server

My Question is: How do I grant permission to ABC group to modify membership of Domain Local Group (XYZ Group)

Thank you in advance for any advice.

Solution:

BNY,

You are wanting to delegate group membership administration which can be achieved by:
+Right-click XYZ group object in Active Directory Users and Computers
+Select Properties > Security
+Add ABC global group and assign at least read / write permissions.

You may be able to find a better reference for WMI scripting of this, but found this automation that looks decent:

http://techtasks.com/code/viewbookcode/1631

Regards,

–isa