Re: User group



William A. J. wrote:
I need an advice on how to automatically add users who log on to a
Windows XP workstation in a domain to a certain user group (in this case I
need them to be part of Power Users group). I found Group Policy
had no option for this.

You 'found' incorrectly.
How did you research to 'find' that group policy could not do this?

Search using Google!
http://www.google.com/
(How-to: http://www.google.com/intl/en/help/basics.html )

To use restricted groups:
- Open Active Directory Users and Computers.
- Browse to the OU that will contain the computer account objects
- Open "Properties"
- Select the Group Policy Tab
- Create a new Group Policy Object
- Edit the new object
- In the Group Policy MMC, browse to:
Computer Configuration/Windows Settings/Security Settings/Restricted
Groups
- Right-Click and choose "Add Group"
- The group name you enter will be the group that is restricted ("Power
Users")
- Select the group and choose the allowed members. ("Authenticated Users")

I recommend against making all users power users. Too much power. Leave
them as users.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html


.



Relevant Pages

  • Re: disable net create command
    ... Then that user must be in the power users local group on that computer. ... Disabling the command ... logging on with a local account to try to bypass Group Policy. ... > administrator account via the ...
    (microsoft.public.win2000.security)
  • Re: How to include a "Power Users" group to be include in a GPO
    ... However if this Group Policy is going to be ... create a domain global group and add users that ... >> How can I to create a group that evolves the local Power Users groups from ... >> Juan Villegas Azuaje ...
    (microsoft.public.windows.server.security)
  • RE: Group Policy or Setting -- Prevent Install Software
    ... Hi Adam, firstly please accept there is no 100% guaranteed way to stop your ... rule in group policy software restriction policies. ... My users are Power Users to the desktops. ... They cannot install software but I find they can install toolbars and ...
    (microsoft.public.windows.server.active_directory)
  • Re: User group
    ... Group Name when I add a group in Restricted Groups can be anything as it is ... add to Power Users, and "The group is a member of" would be Power Users, ... How did you research to 'find' that group policy could not do this? ...
    (microsoft.public.windowsxp.security_admin)