It is possible in Windows (and now in Samba also) to create a local group that has members (contains), domain users, and domain global groups. Creation of the local group demo is achieved by executing:

root#  net rpc group add demo -L -S MORDON -Uroot%not24get

The -L switch means create a local group. Use the -S argument to direct the operation to a particular server. The parameters to the -U argument should be for a user who has appropriate administrative right and privileges on the machine.

Addition and removal of group members can be achieved using the addmem and delmem subcommands of net rpc group command. For example, addition of “DOM\Domain Users” to the local group demo would be done by executing:

root#  net rpc group addmem demo "DOM\Domain Users" -Uroot%not24get

The members of a nested group can be listed by executing the following:

root#  net rpc group members demo -Uroot%not24get
DOM\Domain Users
DOM\Engineers
DOM\jamesf
DOM\jht

Nested group members can be removed (deleted) as shown here:

root#  net rpc group delmem demo "DOM\jht" -Uroot%not24get

root#  net rpc group addmem "Administrators" "Domain Users" \
    -S WINPC032 -Uadministrator%secret

#!/bin/bash

/usr/bin/net rpc group addmem "Power Users" "DOMAIN_NAME\$1" \
                   -UAdministrator%secret -S $2

exit 0