Re: restricted groups

From: Al (Al_at_discussions.microsoft.com)
Date: 02/10/05


Date: Wed, 9 Feb 2005 18:47:01 -0800

Hi Everyone

First thanks for help. Both Herb and Gary mention the need of this Adminpak
and working from a workstation to get this to work. I must admit that I
haven't yet read a article that has mentioned this or actually seen it in
several of the Microsoft training books I have looked through. I will have to
mention this to one of our instructors who brought it to my attention when he
was working through a training manual in preperation for a lab and I know
there is no mention in this manual about this. I used the interactive group
based on the advise of another network administrator but based on what
Ptwilliams has said I can see the problem there.

"Cary Shultz [A.D. MVP]" wrote:

> Al,
>
> Because you need to create the GPO from a workstation on which you have
> installed the ADMINPAK. You will not be able to do this when sitting on a
> Domain Controller! It is well documented!
>
> --
> Cary W. Shultz
> Roanoke, VA 24014
> Microsoft Active Directory MVP
>
> http://www.activedirectory-win2000.com
> http://www.grouppolicy-win2000.com
>
>
>
> "Al" <Al@discussions.microsoft.com> wrote in message
> news:40FE30C7-1CB0-4623-906B-19247A4D82F0@microsoft.com...
> >I have an application that all domain users must be able to run on a local
> > machine. It requires them to be a member of the power users group.
> > What I'm trying to do is under the default domain policy is use the
> > restricted group setting to make the domain users group a member of the
> > local
> > power users group. When I do this and the log on as a domain user and then
> > try to run this application it fails. However if I manually add the domain
> > users group to the power users account through the local users and groups
> > management console the domain user is able to run the application.
> > Why is the restricted group policy not working for me.
>
>
>



Relevant Pages

  • Re: restricted groups
    ... on the focus of the school and the instructors of said school). ... Microsoft Active Directory MVP ... It requires them to be a member of the power users group. ... >>> restricted group setting to make the domain users group a member of the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Least amount of privileges
    ... It depends on what the domain users group has for permissions. ... Does this third party program have a service account that runs the app for ... moving this app off of your sql server and put it on a seperate server. ...
    (microsoft.public.windows.server.active_directory)
  • Re: restricted groups
    ... >I have an application that all domain users must be able to run on a local ... It requires them to be a member of the power users group. ... > Why is the restricted group policy not working for me. ...
    (microsoft.public.windows.server.active_directory)
  • Re: OWA distorted
    ... group contains 'Domain Users', Authenticated Users', and the special ... 'INTERACTIVE' user account. ... domain users group? ...
    (microsoft.public.exchange.admin)
  • Re: File permissions
    ... The user logon server is a workstation and we have added user to Remote ... desktop users group and local users group .Our requirement: ... desktop users group and local users group.The user should only have ...
    (microsoft.public.windows.server.active_directory)