Re: How can i give rigths to my users like Local Power User?

Sorry i make mistake. Now i create a group and gpo on the restricted gorups i
add my group here and add Power Users (not Builtin\Power Users) to members
(not members of) and its work fine. But when i remove my group from
restricted groups then user still belong to power users group. What is the
problem?
--
MCP


"Paul Bergson [MVP-DS]" wrote:

If you followed the details of the restricted groups I provided I am unclear
as to why it would fail. I have had many users use this before without any
problems.

Was the user placed in the group on the local machine?

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"volkans80" <volkans80@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:73828466-4912-4C29-911A-51ACFCB9FAC9@xxxxxxxxxxxxxxxx
BUILTIN\Administrators accepted but BUILTIN\Power Users could not be
validated
and
i try administrators
This solution is not work. When i run gpresult then computer groups has
BUILTIN\Administrators but user group has not admin or another group and
user
still restricted not local admin

--
MCP


"Paul Bergson [MVP-DS]" wrote:

Sorry the previous was a generic for local admins. Change it to Power
users
and it should be fine.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no
rights.

"Paul Bergson [MVP-DS]" <pbergson@xxxxxxxxxxxxxxxxx> wrote in message
news:u40CSXLvHHA.4612@xxxxxxxxxxxxxxxxxxxxxxx
Following on Jorge's initial correct reading from your original post

You could use the restricted user group gpo setting


computer configuration \ windows settings \ restricted groups

group = your group to be made local admins
member of = BUILTIN\Administrators



http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/156780ef-eb36-4433-b3fe-1b1a15c18f6a.mspx

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_scerestrictgroups.mspx


There is absolutely nothing that has to be done on the client side.

Create the gpo in the ou where the Computers reside (NOT the users), go
to
computer configuration/windows settings/security settings/restricted
groups, right click on restricted groups and select new group (For the
local computers, this group name should be - administrators) and key in
the group you want auto populated. Select add on the Members of this
group and then add the members you want populated.


--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no
rights.

"volkans80" <volkans80@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BE30DA0F-68BA-4F65-A449-301584D77669@xxxxxxxxxxxxxxxx
I am working on active directory and domain system. And i don't want to
give
local power user rigts to my users. I want use active directory and
domain
system.
--
MCP


"Paul Bergson [MVP-DS]" wrote:

Are you referring within Active Directory or locally? What specific
permissions are you trying to provide? More details are needed to
assist
you.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no
rights.

"volkans80" <volkans80@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0932FCAC-B99A-4A43-BDDC-051A34DD4724@xxxxxxxxxxxxxxxx
I want create a group and give rigts to this group and add users to
this
group. But i want give rights to this group like local power user
group.
How
can i do this?
--
MCP











.

Relevant Pages

  • Re: Copy membership script
    ... Adding New Members to a Group ... MVP - Directory Services ... This posting is provided "AS IS" with no warranties, and confers no rights. ...
    (microsoft.public.windows.server.active_directory)
  • System permissions and printer forms - serious design flaw in Win2K security?
    ... Only power users and system administrators can create printer forms. ... local user account to have either power user or administrator rights ... Does anyone know how the various permissions implicit in group ...
    (microsoft.public.win2000.security)
  • Re: user account types
    ... XP Home or Pro in the mode you indicate (i.e. domain members), ... very result you describe when an account was in Power Users, ... which it does not for a fresh account I just defined on a test XP ... Pro stand-alone. ...
    (microsoft.public.security)
  • Re: Domain Users rights on local machine
    ... The domain Users are just members of the Users group. ... groups -> groups -> Power Users and add to the list of members the Domain ... Power Users Access, if yes how so? ... is a Domain Admin given ...
    (microsoft.public.windowsxp.setup_deployment)
  • RE: Send As permissions getting overwritten
    ... The issue should be caused that the users are members of the 'Domain ... Apply the 'Users' template to the existing power users using the Change ... User Permissions Wizard. ... >I've set up the security auditing as you've specified, ...
    (microsoft.public.windows.server.sbs)