Re: How can i give rigths to my users like Local Power User?

Sorry the previous was a generic for local admins. Change it to Power users
and it should be fine.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Paul Bergson [MVP-DS]" <pbergson@xxxxxxxxxxxxxxxxx> wrote in message
news:u40CSXLvHHA.4612@xxxxxxxxxxxxxxxxxxxxxxx
Following on Jorge's initial correct reading from your original post

You could use the restricted user group gpo setting


computer configuration \ windows settings \ restricted groups

group = your group to be made local admins
member of = BUILTIN\Administrators



http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/156780ef-eb36-4433-b3fe-1b1a15c18f6a.mspx

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_scerestrictgroups.mspx


There is absolutely nothing that has to be done on the client side.

Create the gpo in the ou where the Computers reside (NOT the users), go to
computer configuration/windows settings/security settings/restricted
groups, right click on restricted groups and select new group (For the
local computers, this group name should be - administrators) and key in
the group you want auto populated. Select add on the Members of this
group and then add the members you want populated.


--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no
rights.

"volkans80" <volkans80@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BE30DA0F-68BA-4F65-A449-301584D77669@xxxxxxxxxxxxxxxx
I am working on active directory and domain system. And i don't want to
give
local power user rigts to my users. I want use active directory and
domain
system.
--
MCP


"Paul Bergson [MVP-DS]" wrote:

Are you referring within Active Directory or locally? What specific
permissions are you trying to provide? More details are needed to
assist
you.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no
rights.

"volkans80" <volkans80@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0932FCAC-B99A-4A43-BDDC-051A34DD4724@xxxxxxxxxxxxxxxx
I want create a group and give rigts to this group and add users to
this
group. But i want give rights to this group like local power user
group.
How
can i do this?
--
MCP







.

Relevant Pages

  • Re: dns host name issue
    ... Paul Bergson ... MVP - Directory Services ... Can you do an nslookup against both dns servers and see what the ...
    (microsoft.public.windows.server.dns)
  • Re: "domainreplica" parameter in LDAP
    ... Paul Bergson ... MVP - Directory Services ... (Event String could not be retrieved) ...
    (microsoft.public.windows.server.active_directory)
  • Re: Naming your AD domain
    ... Paul Bergson ... MVP - Directory Services ... 2003, 2000 (Early Achiever), NT ...
    (microsoft.public.windows.server.active_directory)
  • Re: Software deployment under computer configuration
    ... Paul Bergson ... MVP - Directory Services ... Please no e-mails, any questions should be posted in the NewsGroup This ...
    (microsoft.public.windows.server.active_directory)
  • Re: Migrating active directory and exchange
    ... Paul Bergson ... MVP - Directory Services ... and the old site have 4 servers in them (App/Web server, Exchange server, ...
    (microsoft.public.win2000.active_directory)
Loading