Re: MultiLanguage Power User group membership with GPO

From: Michel Lapointe (a_at_microsoft.com)
Date: 04/14/04 

Date: Wed, 14 Apr 2004 08:09:29 -0400

I've try to use the SID and it's not doing reverse SID, it's looking for the
group name S-1-4... Unless there is a specific way of creating the
restricted group.

How is call the power users group on the Russian Version?

ML

"Derek Melber [MVP]" <derekm@braincore.net> a ecrit dans le message de
news:uTcLpndIEHA.2300@tk2msftngp13.phx.gbl...
Dmitry, you are using the SID in the restricted group entry? That is very
cool! 

-- 
Derek Melber
BrainCore.Net
derekm@braincore.net
"Dmitry Korolyov [MVP]" <d__k@removethispart.mail.ru> wrote in message
news:ORY6$gaIEHA.828@TK2MSFTNGP12.phx.gbl...
Well, we do have Power Users group set up as a restricted group, and we have
platrofms with both English and Russian OS installed. And it works just
fine.
-- 
Dmitry Korolyov [d__k@removethispart.mail.ru]
MVP: Windows Server - Active Directory
"Derek Melber [MVP]" <derekm@braincore.net> wrote in message
news:eg3JwNaIEHA.1048@TK2MSFTNGP12.phx.gbl...
Dmitry,
I don't think you can use this in the GPO though... it won't do a reverse
lookup with the SID.
-- 
Derek Melber
BrainCore.Net
derekm@braincore.net
"Dmitry Korolyov [MVP]" <d__k@removethispart.mail.ru> wrote in message
news:eMXE46ZIEHA.964@TK2MSFTNGP10.phx.gbl...
SID: S-1-5-32-547
Name: Power Users
Description: A built-in group. By default, the group has no members. Power
users can create local users and groups; modify and delete accounts that
they have created; and remove users from the Power Users, Users, and Guests
groups. Power users also can install programs; create, manage, and delete
local printers; and create and delete file shares.
(from KB243330, Well Known Security Identifiers in Windows 2000)
BTW, as for my knowledge, SID is always used for Restricted Groups
processing, and you should receive no errors no matter what locale do you
have on a client PC.
-- 
Dmitry Korolyov [d__k@removethispart.mail.ru]
MVP: Windows Server - Active Directory
"Michel Lapointe" <a@microsoft.com> wrote in message
news:eWZHrcYIEHA.2144@TK2MSFTNGP12.phx.gbl...
Hello,
    Does anyone know how to use a SID when assigning Group Membership in a
GPO ?
    The problem we have is that we use both English and French XP.
    Therefore we have either Power Users or Utilisateur avec Pouvoir as a
local group on a Workstation.
    If I create a GPO that force membership for both group, it work but it
generate an error because one of the group doesn't exist on both platform.
So is there a way to use the SID of the Power Users group to force
membership instead?
Thank
ML

Relevant Pages

  • Re: foreign language gpo
    ... (most machines are win2k, Policy editing machine is Win XP with GPMC). ... Your problem with the Power Users Group is a little bit more difficult. ... The problem is, that your edit the GPO from a system, that did not write ... You need the SID of the group inside your GPO, ...
    (microsoft.public.windows.group_policy)
  • Re: foreign language gpo
    ... (most machines are win2k, Policy editing machine is Win XP with GPMC). ... Your problem with the Power Users Group is a little bit more difficult. ... The problem is, that your edit the GPO from a system, that did not write ... You need the SID of the group inside your GPO, ...
    (microsoft.public.windows.group_policy)
  • Re: MultiLanguage Power User group membership with GPO
    ... Name: Power Users ... BTW, as for my knowledge, SID is always used for Restricted Groups ... If I create a GPO that force membership for both group, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Wrong NTFS-Permissions after dcpromo
    ... This sid is for the Power Users group - ... use the old deprecated groups anyway (Server Operators, Power Users, ... contain the group "server-operators" but instead they contain the SID ...
    (microsoft.public.windows.server.active_directory)
  • Re: MultiLanguage Power User group membership with GPO
    ... you are using the SID in the restricted group entry? ... Derek Melber ... Well, we do have Power Users group set up as a restricted group, and we have platrofms with both English and Russian OS installed. ...
    (microsoft.public.windows.server.active_directory)
Loading