Re: Privilege to install / uninstall software on numerous systems.

Well, you won't be able to add a domain local group to a computer local group, so that won't work! But in general, if you want to use "this group is a member of" then what you do is when you do the "Add Group", you would add the group you want to make a member of the Power Users Group. Let's say its a domain global group called "Desktop Admins". You would add that group and then in the "this group is a member of" dialog, you would add Power Users.

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

Script Group Policy Settings with the GPExpert Scripting Toolkit for PowerShell!
Find out more at http://www.sdmsoftware.com/products2.php

Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

"gscanga" <gscanga@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:94C73D1C-3799-442A-83F2-85AB41B8A82F@xxxxxxxxxxxxxxxx
Thanks Darren,

I guess I'm newer at this than I thought- when I create the gpo, I add the
domain local group that contains the contractors accounts easily enough
(members of this group:) but I'm not sure how to add the local-based power
users privilege to the (This group is a member of:) area of the restricted
group.

I hope that makes sense?



"Darren Mar-Elia" wrote:

Well, you can use Restricted Groups policy to put users or groups into local
workstation groups. So, for example, you could use it to put your
contractors' user account into the target group of workstations' local
administrators group (or Power Users) which would give them sufficient
rights to install software. If target machines are XP, I would start with
Power Users and see if that gives them the ability to successfully manage
software installations. It all depends upon how the package was written.
They might need to be local administrators.

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

Script Group Policy Settings with the GPExpert Scripting Toolkit for
PowerShell!
Find out more at http://www.sdmsoftware.com/products2.php

Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy
Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related



.

Relevant Pages

  • Re: User group
    ... Group Name when I add a group in Restricted Groups can be anything as it is ... add to Power Users, and "The group is a member of" would be Power Users, ... How did you research to 'find' that group policy could not do this? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Power User Setting Not Saved
    ... included in the Restricted Group via this group is a member of. ... power users along with the specific user you added. ... Restricted Groups to speed up propagation of any changes first run gpupdate ... move it to an Organizational Unit that would not have that Group Policy ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Power User Setting Not Saved
    ... included in the Restricted Group via this group is a member of. ... power users along with the specific user you added. ... Restricted Groups to speed up propagation of any changes first run gpupdate ... move it to an Organizational Unit that would not have that Group Policy ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Power User Setting Not Saved
    ... There are two ways to do Restricted Groups - members of this group or this ... you use this group is a member of then the global group/uers you specify ... will be added to the power users group and the existing members will not be ... move it to an Organizational Unit that would not have that Group Policy ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Permissions
    ... administrative permissions in each domain (Domainb.local ... Create a local group on the member server in the ... >Symptom 1 often occurs when the domain administrators ...
    (microsoft.public.win2000.security)