Re: restricted groups

From: Chriss3 [MVP] (noSpamHere_at_chrisse.se)
Date: 02/09/05 

Date: Wed, 9 Feb 2005 23:59:47 +0100

Hello,
If you look into the Power Users group, is the domain users group a member
of it? Is there any related events, in the event log? 

-- 
Regards
Christoffer Andersson
Microsoft MVP - Directory Services
No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips
"Al" <Al@discussions.microsoft.com> skrev i meddelandet 
news:40FE30C7-1CB0-4623-906B-19247A4D82F0@microsoft.com...
>I have an application that all domain users must be able to run on a local
> machine. It requires them to be a member of the power users group.
> What I'm trying to do is under the default domain policy is use the
> restricted group setting to make the domain users group a member of the 
> local
> power users group. When I do this and the log on as a domain user and then
> try to run this application it fails. However if I manually add the domain
> users group to the power users account through the local users and groups
> management console the domain user is able to run the application.
> Why is the restricted group policy not working for me.

Relevant Pages

  • Re: Protecting the All Users Start Menu
    ... domain user account objects are members of the local Power Users group. ... I am sure that you know, the Domain Users is, by default, a member of the ... that the user be a member of the local Administrators group. ...
    (microsoft.public.win2000.active_directory)
  • Re: restricted groups
    ... > I have an application that all domain users must be able to run on a local ... It requires them to be a member of the power users group. ... Could be a failure to link or apply the policy, permissions, ...
    (microsoft.public.windows.server.active_directory)
  • Re: restricted groups
    ... on the focus of the school and the instructors of said school). ... Microsoft Active Directory MVP ... It requires them to be a member of the power users group. ... >>> restricted group setting to make the domain users group a member of the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Least amount of privileges
    ... It depends on what the domain users group has for permissions. ... Does this third party program have a service account that runs the app for ... moving this app off of your sql server and put it on a seperate server. ...
    (microsoft.public.windows.server.active_directory)
  • Re: restricted groups
    ... Both Herb and Gary mention the need of this Adminpak ... and working from a workstation to get this to work. ... >>I have an application that all domain users must be able to run on a local ... It requires them to be a member of the power users group. ...
    (microsoft.public.windows.server.active_directory)
Loading