Re: Making users "Power Users"

Another solution is a simple bat file that will be deployed by a GPO at the
COMPUTER level containing the following command line:

--------------------
net localgroup "local group name" "domain name\group name" /add
--------------------

This can be usefull for all local groups.


--
Razvan Despa

IT assistent
Romania


"Dan" wrote:

true, I'm a fan of the GPO method as well.
Sometime scripting will give you more flexability (i.e. if you don't want to
over-ride the power users already configured on the machine.)


"Herb Martin" wrote:

"Dan" <Dan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B1C98449-20E4-4C8E-B1F1-D07BF49F8212@xxxxxxxxxxxxxxxx
A script is the way to go my friend.
He're 2 good starting points....

http://searchwindowssecurity.techtarget.com/originalContent/0,289142,sid45_gci1065698,00.html?bucket=NEWS

The problem with the above script (which is solved)
by the GP Restricted Group method) is that you would
need to run it on all new machines, confirm that it works
individually and completely, and deal with it this way
again if it needs to be revoked.

It's a viable method -- but not nearly as clean as the GPO.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]


and

http://www.microsoft.com/technet/scriptcenter/resources/qanda/oct04/hey1008.mspx

-Dan Holton

"DrewB" wrote:

I need to make a user a Power User on all of our machines. However, we
have
over 300 boxes and I really can't go to every single one of them and add
him.
Is there a way to make a user a power user on all machines using Active
Directory and/or Group Policy? All the solutions I've seen seem to be for
Windows 2000 servers and say to use Restricted Groups in Group Policy.
However, when I go there the Power Users group doesn't appear because (I
assume) of the Active Directory. Our DCs are running 2003 and all of our
boxes are Windows XP Pro.



.

Relevant Pages

  • Re: foreign language gpo
    ... (most machines are win2k, Policy editing machine is Win XP with GPMC). ... Your problem with the Power Users Group is a little bit more difficult. ... The problem is, that your edit the GPO from a system, that did not write ... You need the SID of the group inside your GPO, ...
    (microsoft.public.windows.group_policy)
  • Re: foreign language gpo
    ... (most machines are win2k, Policy editing machine is Win XP with GPMC). ... Your problem with the Power Users Group is a little bit more difficult. ... The problem is, that your edit the GPO from a system, that did not write ... You need the SID of the group inside your GPO, ...
    (microsoft.public.windows.group_policy)
  • Re: DST Updates Deployed via Group Policy
    ... I did run the script locally on the testing machine ... WAS able to select the group in the GPO editor so I assumed that it could ... things are working, that is, the machines are being healthy little ... Windows 2000 Pro machines and 2 Windows 2000 Servers that require this ...
    (microsoft.public.windows.group_policy)
  • Re: DST Updates Deployed via Group Policy
    ... WAS able to select the group in the GPO editor so I assumed that it could ... I am using one machine to test the script at the moment and rebooting it did ... Have the W2k machines rebooted (needed to see the new group ... Windows 2000 Pro machines and 2 Windows 2000 Servers that require this ...
    (microsoft.public.windows.group_policy)
  • RE: GPO and WXP
    ... it works when join a Windows XP machine to a Windows 2000 ... Does this issue occur on all the newly joined Windows XP machines? ... such kind of domain wide GPO deployment issue is better ... >We have noticed that when we installed new WXP PC's one of the GPO's ...
    (microsoft.public.windowsxp.general)
Quantcast