Re: Adding users to the local groups

In addition to Steve's comments: personally I would choose GP & Restricted
Groups feature instead of using startup scripts.
Also, you will be able to browse for Power Users group if you open the
gpedit not from the DC, but from any other member server or workstation.
Power Users is a security principal that doesn't exist on DCs, and that's
the reason why you cannot browse for it.
There is a similar situation for Server Operators group, for example (can
browse for it only from editing policy on DC, but not when editing from some
other workstation).

--
Dmitry Korolyov [d__k@xxxxxxxxxxxxxxxxxxxxxx]
MVP: Windows Server - Directory Services


"Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx> wrote in message
news:OB8cy8NqFHA.1556@xxxxxxxxxxxxxxxxxxxxxxx
> If they need to be in the power users group on a group of computers you
> can use Group Policy Restricted Groups and "member of" and the OU level
> where the computers you want the users to be power users on are located in
> that OU or a sub OU of it. You will not be able to browse to power users
> group when configuring Restricted Groups but you can simply type in and
> group name such as power users in your case. You also could use Group
> Policy "startup script" to add the users to the local power users group
> using the net localgroup command. Use net help localgroup for more info on
> how to use the net localgroup command and if groups name has a space in it
> put quotes around the group name. The links below may help. --- Steve
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;228496
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/611.asp
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/65aa4e48-8b1f-42bc-b20f-64f67367dadc.mspx
> http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/optimize/startw2k.mspx
>
>
> "Spin" <spin36@xxxxxxxxxxxx> wrote in message
> news:YK1Pe.26$Uc5.14@xxxxxxxxxxxxxxxxxxxxxxx
>> Question one
>> We have some users that need to be in the power users local group but i
>> cant see anyway of adding them to the local groups by GPO ,can some give
>> me a pointer or a link to a web page on how to do it or were to find it
>> in the GPO.
>>
>
>


.

Relevant Pages

  • RE: adding a logged in user as a Power User
    ... Create a batch file with the following line: ... This will add all domain users to the power users groups. ... Then click add at the startup scripts window and search. ... So I created the .bat file with the required line in it. ...
    (microsoft.public.win2000.networking)
  • Re: XP Home and Adding and Editing Local Groups
    ... > I know there is a way to add new Local Groups in XP Home ... > through the NET LOCALGROUP command, but is there a way to ... > For example, could a group, perhaps "Power Users for XP Home," ... > be created and then given privileges and granted access similar ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Privilege to install / uninstall software on numerous systems.
    ... Well, you won't be able to add a domain local group to a computer local group, so that won't work! ... But in general, if you want to use "this group is a member of" then what you do is when you do the "Add Group", you would add the group you want to make a member of the Power Users Group. ... Script Group Policy Settings with the GPExpert Scripting Toolkit for PowerShell! ...
    (microsoft.public.windows.group_policy)
  • Re: Local privileges of domain users
    ... key the name of the Local group you want populated - in your case, key exactly the words Power Users ... "Meinolf Weber" wrote: ... with restricted groups feature in a GPO. ...
    (microsoft.public.windows.server.active_directory)
  • Limiting Users
    ... to be placed in the "Power Users" local group. ... they've taken a liking to installing ... machines. ...
    (microsoft.public.win2000.security)
Loading