how to add xp power user to local computer in DC GP?

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

--
Tech Servant James Pang.

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

See tip 3251 » Group Policy Restricted groups.
in the 'Tips & Tricks' at http://www.jsifaq.com

Use http://support.microsoft.com?kbid=320065 as an example.

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Use the "restricted groups" in the machine gpo and add
the power users group manually, because they can´t be found
via browsing on a DC.

HTH
Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
W2K FAQ : http://w2k-faq.ebend.de
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi,

james.johnson schrieb:
> How exactly do you add the local power user account?

You can do 2 things.
a) replace all existing power users with the one you define,
That doesnt take big side effect, because usually there are
no users inside this group

b) add users to the existing group.
Thats the better way, e.g. you want to add local administrators ...

a)
- Add a new security group to the restricted group.
- you can choose your domain group you want
- "This gruop is Member of": Power Users

b)
- add a new security group
- name it manually Power Users
- "Members of this group": Your domain users group you want

HTH
Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
W2K FAQ : http://w2k-faq.ebend.de
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.

 

[dhazar]

Here is a design for Restricted groups that allows you to do all of your rights assignment at the domain level:

http://davidhazar.blogspot.com/2009/10/active-directory-group-policy.html

David Hazar