Re: How to include a "Power Users" group to be include in a GPO

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 03/01/05 

Date: Mon, 28 Feb 2005 18:08:12 -0600

Obviously power users is not a domain group which is why you do not see it
in AD Users and Computers. However if this Group Policy is going to be
applied to domain members and not domain controllers you may be able to type
in the name "power users" and then it would apply to users who are in the
power users local group on the computer that is having the policy applied
to. If that does not work, create a domain global group and add users that
you want to have that user right to the global group and then add that
global group to the user right. Another possibility could be to use the
ntrights command to give the powers user group the user right that you want
which can also be done via a Group Policy startup script.. --- Steve

http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/techref/en-us/Default.asp?url=/Resources/Documentation/windowsserv/2003/all/techref/en-us/ntrights_examples.asp
--- how to use ntrights

"Juan Villegas Azuaje" <juanvillegas> wrote in message
news:E09B666B-4AD9-4132-922F-C03789C403E2@microsoft.com...
> Hello everybody,
>
> I have a GPO configured and linked to an Organizational Unit.
>
> In the User Rights Assignment I need to Allow log on through Terminal
> Services to the Domain Admins and to a group, (like Power Users), that
> permit
> to selected users to gain access to a server by a Terminal Service
> Session,
> and to perform somes administratives tasks but without Administrators
> privileges.
>
> How can I to create a group that evolves the local Power Users groups from
> each computer in my domain?
>
> My member servers are running Windows Server 2003. And my Domain
> Controllers
> are running Windows 2000 Advanced Server.
>
> --
>
> Juan Villegas Azuaje

Relevant Pages

  • Re: Group Policy/Prevent users from changing time on workstations
    ... You can control who can change the time in group policy. ... only admins and power users can change the time. ... right that the workstation time will sync to the server automatically unless ...
    (microsoft.public.windows.server.sbs)
  • Re: disable net create command
    ... Then that user must be in the power users local group on that computer. ... Disabling the command ... logging on with a local account to try to bypass Group Policy. ... > administrator account via the ...
    (microsoft.public.win2000.security)
  • Re: How to include a "Power Users" group to be include in a GPO
    ... However if this Group Policy is going to be ... create a domain global group and add users that ... >> How can I to create a group that evolves the local Power Users groups from ... >> Juan Villegas Azuaje ...
    (microsoft.public.windows.server.security)
  • RE: Group Policy or Setting -- Prevent Install Software
    ... Hi Adam, firstly please accept there is no 100% guaranteed way to stop your ... rule in group policy software restriction policies. ... My users are Power Users to the desktops. ... They cannot install software but I find they can install toolbars and ...
    (microsoft.public.windows.server.active_directory)
  • Re: User group
    ... Group Name when I add a group in Restricted Groups can be anything as it is ... add to Power Users, and "The group is a member of" would be Power Users, ... How did you research to 'find' that group policy could not do this? ...
    (microsoft.public.windowsxp.security_admin)