Re: Restricted Group Policy settings.

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hi Paul,

Thanks for your reply. Seems i have to google some scripting samples for any
better sulution.

"Paul Bergson" wrote:

You are correct, the Restricted group is going to impact ALL machines the
policy is applied against. You will have to use a login script and use the
test membership executable ifmember or something similar to determine who
you want on which machine.

If member of LapTop Group user then
User logging on = member of Local Power Users group

http://thesource.ofallevil.com/downloads/details.aspx?FamilyID=07c2f6d7-815e-4fa0-9043-4e4635ccd417&displaylang=en

http://www.microsoft.com/technet/scriptcenter/default.mspx


--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup

This posting is provided "AS IS" with no warranties, and confers no rights.

"abckid" <abckid@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1F69B970-2755-4978-AF28-8447715306DA@xxxxxxxxxxxxxxxx
Hi All,

I have many laptop users in the company. We have a default domain policy
for
all the domain users, disallowing to install any softwares on their pc.
Now
since some of these laptop users need access only to install the required
softwares whenever they need to, i want to create a policy for those users
to
have Local Power Users Group rights which i guess would be enough to
install
most of the softwares.

I tried to create a policy using Restricted Groups. But how can we add
"Members of this group" in a way that only the user who logs in will be
added
to the Power Users group ? If i create a Global Group of few users and add
it
to same then, all those users would have full access to each others
laptops
internally !!

Please guide. Thanks,

abckid.



.

Relevant Pages

  • Re: Restricted Group Policy settings.
    ... the Restricted group is going to impact ALL machines the ... If member of LapTop Group user then ... I have many laptop users in the company. ... We have a default domain policy ...
    (microsoft.public.windows.server.active_directory)
  • Re: restricted groups
    ... See Herb's point for how to add a domain group to the power users group ... I found a solution to the issue by making the interactive group a member of the power users group in the restricted group setting. ... >> restricted group setting to make the domain users group a member of the> local ... > Could be a failure to link or apply the policy, permissions,> failure to authenticate. ...
    (microsoft.public.windows.server.active_directory)
  • Re: enable local monitor on Remote computer
    ... what policy do i need to enable to ... allow a member of the power users group to run a command ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Logon to server
    ... I understand that you can not logon the local server ... Controllers Group Policy object. ... Domain Power Users group because the Domain Power Users group is a member ...
    (microsoft.public.windows.server.sbs)
  • Re: restricted groups
    ... the power users group in the restricted group setting. ... >> I have an application that all domain users must be able to run on a local ... It requires them to be a member of the power users group. ...
    (microsoft.public.windows.server.active_directory)