restricted groups

From: Al (Al_at_discussions.microsoft.com)
Date: 02/09/05 

Date: Wed, 9 Feb 2005 10:55:03 -0800

I have an application that all domain users must be able to run on a local
machine. It requires them to be a member of the power users group.
What I'm trying to do is under the default domain policy is use the
restricted group setting to make the domain users group a member of the local
power users group. When I do this and the log on as a domain user and then
try to run this application it fails. However if I manually add the domain
users group to the power users account through the local users and groups
management console the domain user is able to run the application.
Why is the restricted group policy not working for me.

Relevant Pages

  • Re: Share Folder Permission on xp in a 2003 domain
    ... If you really really need your users to be power users I'd choose to ... use restricted groups to make Domain Users member of the local Power ... > create permenant shared objects ...
    (microsoft.public.win2000.active_directory)
  • Big Trouble!
    ... I have a user that in Active Directory is assigned to the ... Domain Users Group and in their PC to the Power users ... users to the Power Users group from my Active Directory ...
    (microsoft.public.win2000.active_directory)
  • Re: allowing all domain user to be a powerusers on window XP
    ... You can add the domain users group to the power users group on any XP ... > personal client but is there a way to do it so that they are automatically ...
    (microsoft.public.windows.server.general)
  • Re: restricted groups
    ... on the focus of the school and the instructors of said school). ... Microsoft Active Directory MVP ... It requires them to be a member of the power users group. ... >>> restricted group setting to make the domain users group a member of the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Least amount of privileges
    ... It depends on what the domain users group has for permissions. ... Does this third party program have a service account that runs the app for ... moving this app off of your sql server and put it on a seperate server. ...
    (microsoft.public.windows.server.active_directory)