changing ACL/owner of local group

administrators have full privileges for groups local to a computer,
but power users appear to be able to modify only the local groups
which they themselves have created.

i would like to allow people in the power users group on the target
system to be able to create local groups [on the target system] which
they can then apply to files/folders/etc on that target system. this
is fine and good until the person changes job function and a different
person needs to manage the local group on the remote system. since
they are only a power user, they cannot manage the group's membership.
my assumption is that there is an ACL or owner setting for the local
group which says 'only allow administrators or the creator of the
group to modify the group'

i pretty much drew a blank looking for documentation on how to even
get a hold of the ACL/owner of a local group, which i imagine would be
the first step in my quest.

so.. does anyone have any pointers as to how to access and modify the
ACL/owner information for local groups?


.

Relevant Pages

  • Re: changing ACL/owner of local group
    ... You can use subinacl to modify the group ACL, ... but power users appear to be able to modify only the local groups ... they can then apply to files/folders/etc on that target system. ...
    (microsoft.public.platformsdk.security)
  • Power Users/Users
    ... Members of the Power Users group can create user accounts, ... They can create local groups and remove users from local ... They cannot modify the Administrators or Backup Operators ... >how can i change a user to a power user. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Helpppppppp!!!
    ... Members of the Power Users group can create user accounts, but can modify ... and remove users from local groups they have created. ...
    (microsoft.public.windows.server.general)
  • Re: XP Home and Adding and Editing Local Groups
    ... > I know there is a way to add new Local Groups in XP Home ... > through the NET LOCALGROUP command, but is there a way to ... > For example, could a group, perhaps "Power Users for XP Home," ... > be created and then given privileges and granted access similar ...
    (microsoft.public.windowsxp.security_admin)
  • Re: local group management by Power Users: is there ownership?
    ... Why not grant r/w permission to the parent directory to a group that both ... > fileserver, manage the local groups. ... > local group on the file server, ... > power users for that reason in the first place! ...
    (microsoft.public.windows.server.general)