Re: User group

Hi Shenan,

Thanks for the response. I might have a misunderstanding. I thought the
Group Name when I add a group in Restricted Groups can be anything as it is
just a name, "Member of this group" would be users in the domain I wanted to
add to Power Users, and "The group is a member of" would be Power Users,
which I could not find as there was no Power Users group built-in in DC.

According to your explanation, the correct way to do it is to give the Group
Name Power Users, "Members of this group" will be Authenticated Users, and
"This group is a member of" will be groups in AD.

Is this correct?

Thank you.

William Auw Jong.

"Shenan Stanley" wrote:

William A. J. wrote:
I need an advice on how to automatically add users who log on to a
Windows XP workstation in a domain to a certain user group (in this case I
need them to be part of Power Users group). I found Group Policy
had no option for this.

You 'found' incorrectly.
How did you research to 'find' that group policy could not do this?

Search using Google!
http://www.google.com/
(How-to: http://www.google.com/intl/en/help/basics.html )

To use restricted groups:
- Open Active Directory Users and Computers.
- Browse to the OU that will contain the computer account objects
- Open "Properties"
- Select the Group Policy Tab
- Create a new Group Policy Object
- Edit the new object
- In the Group Policy MMC, browse to:
Computer Configuration/Windows Settings/Security Settings/Restricted
Groups
- Right-Click and choose "Add Group"
- The group name you enter will be the group that is restricted ("Power
Users")
- Select the group and choose the allowed members. ("Authenticated Users")

I recommend against making all users power users. Too much power. Leave
them as users.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html



.

Relevant Pages

  • Re: Power User Setting Not Saved
    ... when I say "local user" I mean the login name that is typically used ... user that is a member of that OU then be a Power User? ... There are two ways to do Restricted Groups - members of this group or this ... membership of the Restricted Group [power users in your case] will be ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Local Printer Access
    ... > You can force a user into a local group via group policy using restricted ... > Restricted Groups Policy Settings ... > Members and Member Of. ... > Stand-Alone Server Default Settings ...
    (microsoft.public.windows.server.active_directory)
  • Re: Power User Setting Not Saved
    ... There is no power users group in Active Directory - it is only available as ... However Group Policy Restricted Groups ... can be used to manage membership of the power users group which seems to be ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Power User Setting Not Saved
    ... There are two ways to do Restricted Groups - members of this group or this ... you use this group is a member of then the global group/uers you specify ... will be added to the power users group and the existing members will not be ... move it to an Organizational Unit that would not have that Group Policy ...
    (microsoft.public.windowsxp.security_admin)
  • Re: assigning users to the Power users group via Group Policy
    ... this group" then you do not see your workstation. ... if you right-click the Restricted Groups node and select "Add ... After selecting your workstation you can type in power users ... > the adminpak installed and I also have Group Policy Management tool ...
    (microsoft.public.win2000.group_policy)