Re: remote power user setup
From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 05/25/05
- Previous message: Roger Abell: "Re: Running programs for non-previleged users on XP"
- In reply to: Kevin: "remote power user setup"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 25 May 2005 08:19:46 -0700
This may be done only if you are content with having the same accounts
being Power Users members on multiple machines.
For each set of machines, ideally collected within some OU structure,
you may make a Restricted Group definition in a GPO linked to the top
of that OU structure, and in the Restricted Group definition for Power Users
state the membership, whether some custom domain group or such as the
built-in Domain Users. Note that this will give those accounts rights to
multiple machines over the network. Due to this you might also want to
take control over login rights in the same GPO, such as setting Deny
Network Login for the same group.
Be aware that a Restricted Group definition is a complete and total
statement of the subject group's membership and memberships.
These are not additive to anything.
Do Not Do This In a Domain Linked GPO, at least not unless you
are wanting to grant this to those accounts on your non-DC production
servers !!!
-- Roger Abell Microsoft MVP (Windows Security) MCSE (W2k3,W2k,Nt4) MCDBA "Kevin" <Kevin@discussions.microsoft.com> wrote in message news:446869D6-963E-48D7-B28B-8F15330AFC95@microsoft.com... > Is there a way to set up new users as power users from group polocy. I have > to set users as local power users on over 100 machines and would like to set > it up as policy so that if they roam the power user will roam with them. > >
- Previous message: Roger Abell: "Re: Running programs for non-previleged users on XP"
- In reply to: Kevin: "remote power user setup"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
