Re: How to include a "Power Users" group to be include in a GPO

From: Juan Villegas Azuaje (juanvillegas)
Date: 03/01/05 

Date: Mon, 28 Feb 2005 18:11:02 -0800

Steven, Thank you very much.

This is the best solution: "...to type in the name "power users".."

again.. Thank you very much.

Juan Villegas Azuaje

"Steven L Umbach" wrote:

> Obviously power users is not a domain group which is why you do not see it
> in AD Users and Computers. However if this Group Policy is going to be
> applied to domain members and not domain controllers you may be able to type
> in the name "power users" and then it would apply to users who are in the
> power users local group on the computer that is having the policy applied
> to. If that does not work, create a domain global group and add users that
> you want to have that user right to the global group and then add that
> global group to the user right. Another possibility could be to use the
> ntrights command to give the powers user group the user right that you want
> which can also be done via a Group Policy startup script.. --- Steve
>
> http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/techref/en-us/Default.asp?url=/Resources/Documentation/windowsserv/2003/all/techref/en-us/ntrights_examples.asp
> --- how to use ntrights
>
> "Juan Villegas Azuaje" <juanvillegas> wrote in message
> news:E09B666B-4AD9-4132-922F-C03789C403E2@microsoft.com...
> > Hello everybody,
> >
> > I have a GPO configured and linked to an Organizational Unit.
> >
> > In the User Rights Assignment I need to Allow log on through Terminal
> > Services to the Domain Admins and to a group, (like Power Users), that
> > permit
> > to selected users to gain access to a server by a Terminal Service
> > Session,
> > and to perform somes administratives tasks but without Administrators
> > privileges.
> >
> > How can I to create a group that evolves the local Power Users groups from
> > each computer in my domain?
> >
> > My member servers are running Windows Server 2003. And my Domain
> > Controllers
> > are running Windows 2000 Advanced Server.
> >
> > --
> >
> > Juan Villegas Azuaje
>
>
>

Relevant Pages

  • Re: How to include a "Power Users" group to be include in a GPO
    ... Obviously power users is not a domain group which is why you do not see it ... create a domain global group and add users that ... which can also be done via a Group Policy startup script.. ... > to selected users to gain access to a server by a Terminal Service ...
    (microsoft.public.windows.server.security)
  • Re: disable net create command
    ... Then that user must be in the power users local group on that computer. ... Disabling the command ... logging on with a local account to try to bypass Group Policy. ... > administrator account via the ...
    (microsoft.public.win2000.security)
  • RE: Group Policy or Setting -- Prevent Install Software
    ... Hi Adam, firstly please accept there is no 100% guaranteed way to stop your ... rule in group policy software restriction policies. ... My users are Power Users to the desktops. ... They cannot install software but I find they can install toolbars and ...
    (microsoft.public.windows.server.active_directory)
  • Re: User group
    ... Group Name when I add a group in Restricted Groups can be anything as it is ... add to Power Users, and "The group is a member of" would be Power Users, ... How did you research to 'find' that group policy could not do this? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User group
    ... How did you research to 'find' that group policy could not do this? ... Open Active Directory Users and Computers. ... Computer Configuration/Windows Settings/Security Settings/Restricted ... I recommend against making all users power users. ...
    (microsoft.public.windowsxp.security_admin)