Group policy can define which of your users should bemembers of a specific group. However, it lacks the granularity you sometimesneed for more specific group membership segmentations.
Here’s an example. Your systems administrators and domainadministrators should be in the local administrators group for all of yoursystems. However, if on some systems, Bob should be in the administrators groupand on other systems, John should be in the administrators group, and so on,group policy cannot handle this.
But User Manager Pro Suite (UMPS) can. It offers a uniquefeature called “move all except” that lets you create mapping to define whatspecific group memberships should look like.
With “move all except” you could keep some of your users in their currentlocal group and move other users to a new local group that you set up. Thisis especially useful for moving excess members of the localadministrators group to a less privileged group.
See the Local Members section of the UMPS user’s guide for more information on "move all except".
