When I create a new user it puts them in domain users. I have other groups that I wish were there that I have to go back and put them in. How can I add those to be the default in active directory?

  • 2
    If this get's migrated to Server Fault, I recommend adding more information about your network/domain, else they might find it too vague
    – Ivo Flipse
    Mar 26, 2010 at 8:12

2 Answers 2


Create a template user then copy that user when you create a new person!

  • ...and ideally disable the account for the template to prevent anyone accidentally using it.
    – AdamV
    Mar 25, 2010 at 23:51
  • yup forgot that little tidbit!
    – tonyr roth
    Mar 26, 2010 at 15:38

You could use dsadd / dsmod commands to create the account and/or add it to relevant groups, and it's pretty easy to do this in a batch file that you call and provide a user name at the same time. Not a solution to add them by default (tony's answer is correct for that), but maybe better in the long term.

Let's say that today your default is for membership of groups A, B, C. Next month you change the default to be A, B, C, D, and update your template. But you still have to go and update existing users. The batch scripting method makes it easy to run the same commands against previous accounts too.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.