add logged in user to Power Users

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance


Hi,

I was searching for a way to add any user who logs in as a Power User,
without having to do it PC by PC.

I found the below. So I created the .bat file with the required line
in it. I then went into the group policy and went to -
Computer Configuration > Windows Settings > Scripts > StartUp

I then added the .bat file which i had put at the root of C. I am
doing this on the domain controller server.

However when i restarted a PC and logged in - that user did not appear
in Power Users. Am I misssing something.

Should the .bat file be in a shared drive. Also how do i force an
update to the group policy so that all PCs are usin the policy with the
changes i made.

Thanks


----------------------------------------------------


I would recommend to add "NT Authority\Interactive" in the local
"Power Users" group to let all domain users automatically be power
users when they log on to a computer interactively.


You can do this operation in a computer startup script (with a
GPO) that runs as part of the boot up process (before the user logs
in). It runs under the system context and has admin rights.


Adding it to the "Power Users" group with a command line in a bat file:



%SystemRoot%\system32\net.exe LOCALGROUP /ADD "Power Users"
"NT Authority\Interactive"

.

Relevant Pages

  • Performance logging access for Pwr User
    ... How can I configure security so that a Power User can run performance logs ... The users are in the local power users group. ... monitoring but they can't access performance logs and alerts to set up ...
    (microsoft.public.win2000.security)
  • Re: How to give all users that log into Windows XP Administrative rights?
    ... You can add the group "Domain Users" to the Power Users ... the "Power Users" group should be good for most users to install ... that they need Admin rights on their computer, ... How can I also set it up so that any user that logs into the computer ...
    (alt.sys.pc-clone.dell)
  • Re: Event Viewer Access Denied
    ... So you are saying that they can access and manage the security logs but not ... the application or system logs from Computer Management. ... Works fine if logging in with the power users account locally ...
    (microsoft.public.windows.server.security)
  • Re: add logged in user to Power Users
    ... I was searching for a way to add any user who logs in as a Power User, ... I then went into the group policy and went to - ... I then added the .bat file which i had put at the root of C. ...
    (microsoft.public.windows.server.active_directory)
  • Re: disable net create command
    ... Then that user must be in the power users local group on that computer. ... Disabling the command ... logging on with a local account to try to bypass Group Policy. ... > administrator account via the ...
    (microsoft.public.win2000.security)