local group management by Power Users: is there ownership?

Tech-Archive recommends: Fix windows errors by optimizing your registry

david.burghgraeve_at_dolmen.be
Date: 02/18/04 

Date: Wed, 18 Feb 2004 09:42:02 -0800

Hi there,
I have a question about ownership of local groups on
windows2003 servers. I have a situation here and It seems
there's not a lot of info about this on the net. Two
different users, each one a member of "power users" on a
fileserver, manage the local groups. If userA creates a
local group on the file server, user B can't modify that
group.

So, there's an ownership involved here...

How kan I change the default owneship behaviour? Or is
there a way that I can setup a right that the two power
users can also manage each-others created groups...

Making them Administrators is not acceptable. They are
power users for that reason in the first place!

Relevant Pages

  • Re: SMS 2003 - adding Secondary site... driving me -mental- :-/
    ... Domain controllers DO have local groups, they just work a little differently ... on DCs than they do on member servers and workstations. ... There is a section of procedures for SMS Account Management near the end. ...
    (microsoft.public.sms.setup)
  • Re: Shared Folder NTFS Permission Problems with Domain Accounts
    ... I look after a firm which has two DCs and four more servers and I've ... I can share the folder without a problem and then when selecting NTFS ... You cannot use LOCAL groups of the domain on non-DCs unless you are ... I've created I just can't select any of the built-in security principals ...
    (microsoft.public.windows.server.general)
  • Migrating NTFS Data to Another Server
    ... between servers in a disaster recovery situation. ... At the moment we currently have a number of file servers ... we would restore the lastest ... then into Local Groups and then ...
    (microsoft.public.windows.file_system)
  • Need help on this one. Very unusual. Cannot see Entire Directory when adding permissions
    ... Both servers are W2K3 SP1 servers. ... The DC is RRAS enabled for internet access. ... access on all machines as well as access to domain resources such as shares. ... My only issue is that I need to create local groups on the app server ...
    (microsoft.public.windows.server.general)
  • Re: Domain Local Groups and Member Servers
    ... We do this in our company, we have tens of thousands of domain local groups ... assigned to resources on a couple thousand servers and it works fine. ... line tools have no problem assigning them. ...
    (microsoft.public.windows.server.security)