Re: Power user group

From: David Poultney (DavidPoultney_at_discussions.microsoft.com)
Date: 12/18/04 

Date: Sat, 18 Dec 2004 00:01:01 -0800

Thanks Torgeir & Desmond

I think the answer is in the article 'How to configure a global group to be
a member of the administrators group on all workstations. I will apply a new
GPO to the exsisting AD structure, modifying the instructions to allow the
global group member ship of the Power user local group.

All this would be needed if a software package I am upgrading installed with
elevated rights.

Many Thanks

David

"Torgeir Bakken (MVP)" wrote:

> David Poultney wrote:
>
> > Hi All,
> > I need to make members of a domain security group have power user rights on
> > Windows XP Pro domain computers. The only way I can see to so this is to add
> > the Domain group to the local power users group on every PC. As I have to do
> > this on some 160 PC, anyone got any quicker solutions. The network is a
> > Windows 2003 domain.
> Hi
>
> Two options for you:
>
> A)
> You could do it in a computer startup script (with a GPO) that runs
> as part of the boot up process (before the user logs in). It runs
> under the system context and has admin rights.
>
>
> B)
> Restricted Groups enforced with Group Policy is maybe an option:
>
> http://groups.google.com/groups?selm=uM5aZa1YDHA.440%40tk2msftngp13.phx.gbl
>
> and
>
> How to Configure a Global Group to Be a Member of the Administrators Group on
> all Workstations
> http://support.microsoft.com/default.aspx?scid=kb;en-us;320065
>
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scriptcenter/default.mspx
>

Relevant Pages

  • Re: Restricted Groups problem
    ... member servers in "sub.domain" via group policy. ... administrators group. ... Are you trying to add a global group to a global group? ... On member servers in the web servers OU of sub.domain, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restricted Groups problem
    ... the group type is a global group from "domain". ... "member of" works, coul you elaborate a little more? ... As for not changing the local administrators group, ... On member servers in the web servers OU of sub.domain, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restricted Groups problem
    ... to be made a member of the groups defined. ... Are you trying to add a global group to a global group? ... As for not changing the local administrators group, ... On member servers in the web servers OU of sub.domain, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Promoting an user to a power user
    ... > member of more groups. ... > Account in Control Panel, which allows to switch between Computer ... > Administrators group and Users group, how could I switch between them? ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Domain Admin Account deleted by local Admin
    ... > my domain, all the users are local admins, but some of them are deleting the ... > domain admin from local administrators group. ... How to Configure a Global Group to Be a Member of the Administrators ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windows.server.active_directory)