"slmleung" <slmleung@discussions.microsoft.com> wrote in message
news:8A114C29-FEF6-49A3-BFBB-69B89C14066A@microsoft.com...
> Hi,
>
> When users log into the domain, it does not give them any local rights. I
> would like to give them power user rights. Currently this is done
> manually.
>
> My question is how can I automatically add a user to the local machine and
> give it power user rights. Can this be done via an AD Policy?
>
> Thanks
> SL
Archived from groups: microsoft.public.win2000.general (More info?)
How can this be done automatically. Is there a way to make the change via a
script? I really don't want to go to every machine and add the group
manually.
"Andrei Ungureanu" wrote:
> you can add Domain Users group to local Power Users group.
>
>
> --
> Andrei Ungureanu
> www.eventid.net > Free Windows event logs reports
> http://www.altairtech.ca/evlog/ >
> "slmleung" <slmleung@discussions.microsoft.com> wrote in message
> news:8A114C29-FEF6-49A3-BFBB-69B89C14066A@microsoft.com...
> > Hi,
> >
> > When users log into the domain, it does not give them any local rights. I
> > would like to give them power user rights. Currently this is done
> > manually.
> >
> > My question is how can I automatically add a user to the local machine and
> > give it power user rights. Can this be done via an AD Policy?
> >
> > Thanks
> > SL
>
>
>
"slmleung" <slmleung@discussions.microsoft.com> wrote in message
news:9846F862-CD6D-4FFA-BB94-FDC8F1AB2808@microsoft.com...
> How can this be done automatically. Is there a way to make the change via
> a
> script? I really don't want to go to every machine and add the group
> manually.
>
>
> "Andrei Ungureanu" wrote:
>
>> you can add Domain Users group to local Power Users group.
>>
>>
>> --
>> Andrei Ungureanu
>> www.eventid.net >> Free Windows event logs reports
>> http://www.altairtech.ca/evlog/ >>
>> "slmleung" <slmleung@discussions.microsoft.com> wrote in message
>> news:8A114C29-FEF6-49A3-BFBB-69B89C14066A@microsoft.com...
>> > Hi,
>> >
>> > When users log into the domain, it does not give them any local rights.
>> > I
>> > would like to give them power user rights. Currently this is done
>> > manually.
>> >
>> > My question is how can I automatically add a user to the local machine
>> > and
>> > give it power user rights. Can this be done via an AD Policy?
>> >
>> > Thanks
>> > SL
>>
>>
>>
I prefer to use Restricted groups for this purpose. Here is a design that allows me to add a domain user to pretty much any local group by adding them to a group in active directory.