I've done some changes to the ISO_SHS container in the WolfTech active directory.

First off, I've created a manged group named "WT-ISO-Infrastructure Systems Operations Staff" that contains all of the ISO staff according to GuardDog.  This group should get updated nightly, so as staff changes it will automatically update itself.

The Wolftech managed group tool is at https://www.wolftech.ncsu.edu/wtmg/index.php

Secondly, I've added this group to the "ISO_Users" and "ISO_SHS_Users" group.

Thirdly, I've set a group policy on the OU=Computers under ISO_SHS container to put ISO_Users and ISO_SHS_Users in the local "Users" group on workstations in or under this container.  This should allow anyone in ISO to log in to a Windows workstation configured as one of "ours."  Go team.

Lastly, I've added with restricted groups gpo the ISO_SHS_ComputerAdmins to the local Administrators' group for "our" machines.  Anyone or anything added to ISO_SHS_ComputerAdmins will be an administrator on the SHS Windows machines.