Re: MultiLanguage Power User group membership with GPO

From: Derek Melber [MVP] (derekm_at_braincore.net)
Date: 04/13/04 

Date: Tue, 13 Apr 2004 15:04:11 -0700

Dmitry,

I don't think you can use this in the GPO though... it won't do a reverse lookup with the SID. 

-- 
Derek Melber
BrainCore.Net
derekm@braincore.net
"Dmitry Korolyov [MVP]" <d__k@removethispart.mail.ru> wrote in message news:eMXE46ZIEHA.964@TK2MSFTNGP10.phx.gbl...
a.. SID: S-1-5-32-547
Name: Power Users
Description: A built-in group. By default, the group has no members. Power users can create local users and groups; modify and delete accounts that they have created; and remove users from the Power Users, Users, and Guests groups. Power users also can install programs; create, manage, and delete local printers; and create and delete file shares.
(from KB243330, Well Known Security Identifiers in Windows 2000)
BTW, as for my knowledge, SID is always used for Restricted Groups processing, and you should receive no errors no matter what locale do you have on a client PC.
-- 
Dmitry Korolyov [d__k@removethispart.mail.ru]
MVP: Windows Server - Active Directory
  "Michel Lapointe" <a@microsoft.com> wrote in message news:eWZHrcYIEHA.2144@TK2MSFTNGP12.phx.gbl...
  Hello,
      Does anyone know how to use a SID when assigning Group Membership in a
  GPO ?
      The problem we have is that we use both English and French XP.
      Therefore we have either Power Users or Utilisateur avec Pouvoir as a
  local group on a Workstation.
      If I create a GPO that force membership for both group, it work but it
  generate an error because one of the group doesn't exist on both platform.
  So is there a way to use the SID of the Power Users group to force
  membership instead?
  Thank
  ML

Relevant Pages

  • Re: foreign language gpo
    ... (most machines are win2k, Policy editing machine is Win XP with GPMC). ... Your problem with the Power Users Group is a little bit more difficult. ... The problem is, that your edit the GPO from a system, that did not write ... You need the SID of the group inside your GPO, ...
    (microsoft.public.windows.group_policy)
  • Re: foreign language gpo
    ... (most machines are win2k, Policy editing machine is Win XP with GPMC). ... Your problem with the Power Users Group is a little bit more difficult. ... The problem is, that your edit the GPO from a system, that did not write ... You need the SID of the group inside your GPO, ...
    (microsoft.public.windows.group_policy)
  • Re: MultiLanguage Power User group membership with GPO
    ... I've try to use the SID and it's not doing reverse SID, ... How is call the power users group on the Russian Version? ... you are using the SID in the restricted group entry? ... If I create a GPO that force membership for both group, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Add custom local user to NTFS rights from GPO
    ... Why this feature of manually being able to add users in User Rights Assignment is available and NOT in NTFS Perms GPO Settings: ... But when I type in the object it always resolves to the SID, i.e. it first checks to see that the object exists on a domain or target machine. ... We need to do this because we would like to put all of the special NTFS permissions in the GPO, but the problem is that we are adding custom local group. ...
    (microsoft.public.windows.group_policy)
  • Re: MultiLanguage Power User group membership with GPO
    ... Name: Power Users ... BTW, as for my knowledge, SID is always used for Restricted Groups ... If I create a GPO that force membership for both group, ...
    (microsoft.public.windows.server.active_directory)