Re: Power User Setting Not Saved

Thanks for the help and link. I've added the local user to the Power Users
group account under Restricted Groups on the Workstations policy for the
primary domain controller for the domain. Will this user be listed as a
Power User on the local machine itself now?

"Steven L Umbach" wrote:

There is no power users group in Active Directory - it is only available as
a local group on domain computers. However Group Policy Restricted Groups
can be used to manage membership of the power users group which seems to be
the case here. It sounds like Restricted Groups is not configured correctly
if the domain user in question is being removed from the power users group
or the domain user is not a member of the global group [don't use domain
local groups] specified in Restricted Groups. The link below may help in
explaining how to configure Restricted Groups. You would need to check the
configuration for Restricted Groups for the Group Policy that rsop.msc shows
as enforcing Restricted Groups. --- Steve

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

"Alfred" <Alfred@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C78435A3-13B9-40E0-9713-DAD38D04E731@xxxxxxxxxxxxxxxx
The computer is a member of AD and so I ran rsop.msc. However, I'm very
new
to Windows administration, so I have no idea what all these security
settings
are telling me. What exactly should I be looking for? Under the
"Restricted
Groups" folder in the Computer Configuration section, I have
Administrators
and Power Users listed, and the local user name with the issue is a member
of
the group listed under Power Users. Why is there no group called Power
Users
under the Active Directory list of groups, but there is under local
Computer
Management?

"Steven L Umbach" wrote:

If the computer is a member of an Active Directory domain their could be
a
Group Policy Restricted Groups configuration that is enforcing group
membership. Running rsop.msc on that computer probably would show such if
that is the case. If not a member of an AD domain then it is hard to say
what is going on but I would enable auditing of account management in
Local
Security Policy and then look for an account management event for change
of
group membership to see what user changed the group membership. If the
user
is system that would indicate that something on the computer is
configured
to enforce group membership. --- Steve



"Alfred" <Alfred@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:7A3E5088-11FC-41AC-BC51-87A4A2F1145A@xxxxxxxxxxxxxxxx
I have a computer that is used for a certain automotive diagnostic
program
and this program requires that the user be logged on as a Power User
due
to
licensing issues. To set this up, I logged on as Administrator and
added
this user login name to the Power Users group under Computer Management
and
Local Users and Groups. I then logged out as Administrator and logged
in
as
the local user and everything worked fine. However, Windows XP seems
to
"forget" that this user is a member of the Power Users group, as I've
had
to
do the same procedure three times now. I'm assuming it happens after
the
users restart the machine, but, regardless, is there some step I'm
missing
to
get this user to remain a Power User? Why is this setting not saved?
Thanks.






.

Relevant Pages

  • Re: Local Machine Rights thru Group Policy
    ... You may want to look into using Restricted Groups to use at the OU level to ... enforce membership of local groups on computers in that OU. ... to those OU machines power users on any machine in that OU they logon to. ...
    (microsoft.public.win2000.group_policy)
  • Re: Power User Setting Not Saved
    ... There is no power users group in Active Directory - it is only available as ... However Group Policy Restricted Groups ... can be used to manage membership of the power users group which seems to be ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Permission On Windows Xp
    ... one way of doing it is use Restricted Groups in a GPO. ... Choose new group, browse to the domains' Local Power Users Group and add it to the local XP machine's groups, and choose Power Users ... browse to the ldomain's Local Admin Users Group and add it to the local XP machine's groups and choose Administrators ... In the XP's computer Management console, look at the Local Power Users and Administrators Groups and see if the Domain\Local Power Users Group is added to the machine's local Power Users group and the Local Admin Users Group is added to the machine';s local Administrators group. ...
    (microsoft.public.windows.server.general)
  • Re: Permission On Windows Xp
    ... Restricted Groups ... create a group and call it Local Power Users Group ... Create another group and call it Local Admin Users Group ... Administrators Groups and see if the Domain\Local Power Users Group is ...
    (microsoft.public.windows.server.general)
  • Re: assigning users to the Power users group via Group Policy
    ... this group" then you do not see your workstation. ... if you right-click the Restricted Groups node and select "Add ... After selecting your workstation you can type in power users ... > the adminpak installed and I also have Group Policy Management tool ...
    (microsoft.public.win2000.group_policy)