Adding Local Groups to GPO

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

My origanization places most users whom should have the ability to add a
local printer into a custom domain group called "PC Power Users". This group
has the same privilege as the out-of-the-box Power Users group. "PC Power
Users" is placed on every domain workstation in it's Power Users group. How
can I assign the local Power Users group the Load/Unload Device Drivers
privilege via GPO without modifying local policies and without locking out
the workstation's Administrators group?

Thanks for your assistance,

- SB

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Just add the power users group to that user right in the appropriate GPO - probably
at the domain or OU level. You can not "browse" for the power users group since it
does not exist at the domain level but you can type in it's name. To keep
administrators with that user right add administrators also and when the policy is
propagated to the domain computers you should see both administrators and power users
in the "effective" policy in Local Security Policy. --- Steve


"Steven Bendis" <Steven Bendis@discussions.microsoft.com> wrote in message
news79F64CB-70A2-49FC-9F42-33C670076804@microsoft.com...
> My origanization places most users whom should have the ability to add a
> local printer into a custom domain group called "PC Power Users". This group
> has the same privilege as the out-of-the-box Power Users group. "PC Power
> Users" is placed on every domain workstation in it's Power Users group. How
> can I assign the local Power Users group the Load/Unload Device Drivers
> privilege via GPO without modifying local policies and without locking out
> the workstation's Administrators group?
>
> Thanks for your assistance,
>
> - SB

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Now I can go in Monday morning armed with something to try. Mr. Umbach,
thank you very much for your reply!

- SB

"Steven L Umbach" wrote:

> Just add the power users group to that user right in the appropriate GPO - probably
> at the domain or OU level. You can not "browse" for the power users group since it
> does not exist at the domain level but you can type in it's name. To keep
> administrators with that user right add administrators also and when the policy is
> propagated to the domain computers you should see both administrators and power users
> in the "effective" policy in Local Security Policy. --- Steve