Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When I create a new user it puts them in domain users. I have other groups that I wish were there that I have to go back and put them in. How can I add those to be the default in active directory?

share|improve this question
If this get's migrated to Server Fault, I recommend adding more information about your network/domain, else they might find it too vague – Ivo Flipse Mar 26 '10 at 8:12
up vote 4 down vote accepted

Create a template user then copy that user when you create a new person!

share|improve this answer
...and ideally disable the account for the template to prevent anyone accidentally using it. – AdamV Mar 25 '10 at 23:51
yup forgot that little tidbit! – tonyr roth Mar 26 '10 at 15:38

You could use dsadd / dsmod commands to create the account and/or add it to relevant groups, and it's pretty easy to do this in a batch file that you call and provide a user name at the same time. Not a solution to add them by default (tony's answer is correct for that), but maybe better in the long term.

Let's say that today your default is for membership of groups A, B, C. Next month you change the default to be A, B, C, D, and update your template. But you still have to go and update existing users. The batch scripting method makes it easy to run the same commands against previous accounts too.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .