Re: Setting local machine permissions via GPO

From: andy smart (anonymous_at_discussions.microsoft.com)
Date: 09/07/05 

Date: Wed, 07 Sep 2005 12:37:05 +0100

Steven L Umbach wrote:
> Try running the support tool gpresult /v on one of the computers in the OU
> to see what it reports. You may want to pipe the report to a text file as in
> gpresult /v>c:\report.txt. It will show the container that the domain
> computer thinks it is in, the Group Policies applied, last time applied, and
> from what domain controller. I believe that with the /v switch you may see
> some info on Restricted Groups. If I remember correctly the "member of"
> feature of Restricted Groups only works well if SP4 is installed. Try making
> some other change to the Group Policy for computer configuration [security
> option or such] that has Restricted Groups configured to see if it
> propagates to the domain computers or not. That will help determine if your
> problem is a general problem with the GPO or with your configuration of
> Restricted Groups. --- Steve
>
>
> "andy smart" <anonymous@discussions.microsoft.com> wrote in message
> news:dfjsj8$2pn$1@newsfeed.th.ifl.net...
>
>>We need to set all our domain users up as power users on the local
>>workstations; we've thought through the implications of this but we have
>>so mucy, err, 'legacy' software out there that it is the easiest way for
>>it all to work. We did this on our old network.
>>
>>Then over the summer we lost the network in a fairly big way, so we have
>>had to create a new domain etc etc etc
>>
>>Now I can't get the gpo to set this permission on the local
>>workstations. I've created a gpo on the workstations OU, used computer
>>settings and restricted groups to make DOMAIN\domain users members of
>>the power users group. Only it doesn't seem to be working.
>>
>>Any ideas of what dumb mistake I've made? (and don't say making them
>>power users in the first place!)
>>
>>tia
>>andy
>
>
>
Ta Steve

That showed the dumb mistake up a treat!

Relevant Pages

  • RE: adding domain users to power users
    ... Create a GPO that uses restricted groups. ... Using the Group Policy Management ... Windows Settings, Security Settings, Restricted Groups. ... Users) Then open that and add whoever you want to be power users on domain ...
    (microsoft.public.windows.server.active_directory)
  • Re: SCECLI event 1202 0x534
    ... Restricted Groups field when it prompts you for the group name. ... >>Create a null Power Users group in your Active ... >>> What exactly are you trying to do in the GPO... ... >>>> all the workstations. ...
    (microsoft.public.win2000.group_policy)
  • Re: Setting local machine permissions via GPO
    ... Try running the support tool gpresult /v on one of the computers in the OU ... to see what it reports. ... feature of Restricted Groups only works well if SP4 is installed. ... > We need to set all our domain users up as power users on the local ...
    (microsoft.public.win2000.security)
  • Re: Power User Setting Not Saved
    ... I've added the local user to the Power Users ... However Group Policy Restricted Groups ... can be used to manage membership of the power users group which seems to be ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Power User Setting Not Saved
    ... There is no power users group in Active Directory - it is only available as ... However Group Policy Restricted Groups ... can be used to manage membership of the power users group which seems to be ...
    (microsoft.public.windowsxp.security_admin)