Devi usare una Group Policy
Prova a vedere: http://msmvps.com/blogs/robwill/arch...08-domain.aspx