Re: Creating a Custom Users Group in Windows XP Professional

From: Doug Knox MS-MVP (dknox_at_mvps.org)
Date: 09/01/05


Date: Thu, 1 Sep 2005 12:22:05 -0400

In GPEDIT, you should be able to go to Computer Configuration, Windows Settings, Security Settings, Local Policies, User rights assignments and modify the Load and unload device driver setting to allow Power Users, or your custom group to this policy.

Depending on the USB device, even a Standard user can install thumb drives and the like, as long as the USB Mass Storage drivers are present on the hard drive.

For changes to the network connection properties, make the users members of the Netork Configuration Operators group. This will give them control over the LAN connection.

The biggest issue with a custom group is ensuring that you give them access to everything they need access to.

For your setup, you may simply want to look into making the users in question Local Administrators. They can do what they need on their computer, but would still be Power Users to the rest of the domain. The Local Administrator privilege does not move to different computers, it is only effective on their computer.

-- 
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
 
"Andrew Tucker" <AndrewTucker@discussions.microsoft.com> wrote in message news:36E5780F-0AB6-41EA-9E1B-850710F398C6@microsoft.com...
> Hi Community,
> 
> I would like to know if I am able to create a custom client for my 
> organisations 
> workstations. I need a client whose users rights can be customised and fall 
> somewhere in between that of the standard Windows Power User, and the 
> Administrator.
> 
> My environment consists on a Domain, however, our clients work within a 
> Workgroup that is within this Domain. I would like to set them up as a "Super 
> Power User" if you will, giving them the rights to add printers, devices, USB 
> devices, and also change their I.P Address ranges when moving from office to 
> office.
> 
> Can this be done?
> 
> Many thanks in advance.
> -- 
> Many thanks,
> 
> Andrew.


Relevant Pages

  • Re: Serious search problem
    ... "Robin Bignall" wrote: ... and ran all of the virus and malware checkers again. ... On the IE properties windows you will see these Taps: ... Click Privacy Tab and make sure your Privacy settings at least Medium High, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: SunJavaScript/Flash/IE6 Not Working right! Help?
    ... I went to that site with my ZAPro settings as is - was able to view the ... I even tried lowering Internet Zone ... Using the Windows Firewall is, for me, not an option. ... The safe Mode test sort of implicates ZA. ...
    (microsoft.public.windows.inetexplorer.ie6.setup)
  • Windows Freezes at Logon after DL Windows updates
    ... the computer had shut me out starting windows ... I clicked my name Maureen Kennedy, and it would start to say it ... -2254 Service Pack 2 That screen shows administrator logon ... Userser name in my documents and settings - called ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: Serious search problem
    ... On the IE properties windows you will see these Taps: ... Click on General Tab, under Browsing Histroy Click Delete Button then Click ... Click Privacy Tab and make sure your Privacy settings at least Medium High, ... On the LAN Properties window Highlight Internet Protocol (TCP/IP) and click ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Cant change home page, read others post
    ... I would do a clean install of Windows Xp and before ... "nass" wrote: ... I don't like the sound of *Reset web settings* not allowed, ... The entry in the registry did change to the new ...
    (microsoft.public.windows.inetexplorer.ie6.browser)